last executing test programs:

21m46.850080423s ago: executing program 0 (id=81):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)

21m44.125349561s ago: executing program 0 (id=89):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r0}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x1c, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000180000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000e80))
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_ext={0x1c, 0x11, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, [@jmp={0x5, 0x0, 0x0, 0x9, 0x2, 0x4, 0x11}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000b00)='syzkaller\x00', 0x3, 0x9d, &(0x7f0000000680)=""/157, 0x41100, 0x3c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x80d2, r1, 0x3, &(0x7f0000000e00)=[r1, r0, r0], &(0x7f0000000e40)=[{0x4, 0x4, 0xe, 0xb}, {0x3, 0x4, 0x4, 0x2}, {0x0, 0x3, 0xd, 0x8}], 0x10, 0x1000}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000000)="7395a094e235b3682415f77227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

21m42.60788679s ago: executing program 0 (id=93):
socket$kcm(0x10, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r2=>r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r5=>0x0, 0x85, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xac, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28e9, 0x0, @perf_bp={0x0, 0x5}, 0x4110, 0x2, 0x0, 0x5, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r6, 0x0)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x9)
r7 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x10000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0xc, &(0x7f0000000680)=ANY=[@ANYRESOCT, @ANYRESHEX=r4, @ANYBLOB="36a1abe143ebcbc1ca387ed029e701923e5099e43fcc00b033d56d022cedafd01fb33697a187a704a9c88fc36ce6a5285d269db57fd7165cf9d9ddcd3ebf3131171c98f5fbd8690c39022975fbc88b8030f6d00a14ad0dc279dccbf26aa9a30349b1e73c1568ca1fcb95c2cf4f69cac5ecbb5a5079b1a2280a3a65257558f4e2d7fb03daaed999d2c63c7e7e876d880055aaeabf6f867107851fc11b5c08f3d62dc17be25f6bac9bdece1986cf", @ANYRES64=r3, @ANYRES8=r2, @ANYRES16=0x0, @ANYRES16, @ANYRESOCT=r5], &(0x7f0000000240)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x4)
r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r9)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
sendmsg$inet(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650400010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

21m40.138819153s ago: executing program 0 (id=100):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079105b000000200007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="c00e020022003505d25a806f8c6394f93124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x2e}], 0x1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db9638edbc"})
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x90010022}]}, 0x90)
close(r7)
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4) (async)
write$cgroup_devices(r3, &(0x7f0000000440)=ANY=[@ANYRESDEC=r2], 0xffdd) (async)
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x3c) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800000000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000c000000000000001080000090610000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fcffffff00"/28], 0x50) (async)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
write$cgroup_devices(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="1b2308217f", @ANYBLOB="836103ca260bdd"], 0xffdd) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000005000000000000000009000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000004000000008000005900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00400000fefdffff00"/28], 0x48)

21m37.056040283s ago: executing program 0 (id=107):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="120000000f0000000400000002"], 0x50)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000bc0), 0x8103, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
setsockopt$sock_attach_bpf(r0, 0x29, 0x48, &(0x7f0000000100)=r1, 0x120)

21m34.891826668s ago: executing program 0 (id=113):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_config_ext={0x7, 0xea1c}, 0x100001, 0xca, 0x0, 0x4, 0x1000000000000, 0x0, 0x0, 0x0, 0x20002, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900040000000400000073000000000100000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002600000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94)
socket$kcm(0x18, 0x0, 0x2)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r2)
ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2040, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0x5, 0x10000, 0xffff}, 0x10, 0x2e04d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x3, 0x3, 0x64, 0x9}, {0x60, 0x1, 0x0, 0x9}, {0x6, 0x6, 0x0, 0x3}]})
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000018008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4)
recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)

21m19.582078428s ago: executing program 32 (id=113):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_config_ext={0x7, 0xea1c}, 0x100001, 0xca, 0x0, 0x4, 0x1000000000000, 0x0, 0x0, 0x0, 0x20002, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900040000000400000073000000000100000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002600000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94)
socket$kcm(0x18, 0x0, 0x2)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r2)
ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2040, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0x5, 0x10000, 0xffff}, 0x10, 0x2e04d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x3, 0x3, 0x64, 0x9}, {0x60, 0x1, 0x0, 0x9}, {0x6, 0x6, 0x0, 0x3}]})
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000018008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4)
recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)

3.875276864s ago: executing program 4 (id=6341):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x4, 0x24, 0xfffffffffffffff0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @multicast})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x2, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b5, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x6, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000380)=ANY=[@ANYBLOB='grep0 8'], 0xa)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000180)={'wlan0\x00'})
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/2'], 0x6a)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], 0x0}, 0x94)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x4)
close(r5)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xfffffffffffffdc5, &(0x7f00000011c0)=[{&(0x7f00000000c0)="5c00000013006bcc9e3be35c6e17aa31066b876c1d0000007ea6e763160af36504001ac0080010000400020002000000ef64bc24eab556a705251e618294ff0051f60a9553adac000e4509c5bbcd72c6c953ec3ded4d8217961381fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (fail_nth: 4)

3.651930737s ago: executing program 5 (id=6343):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
close(0xffffffffffffffff)
socket$kcm(0xa, 0x6, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x90010022}]}, 0x90)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979e29857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37ceff9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f0800000000000000af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed210d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734f87da3770845cf442d488afdc0e170000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bbf8ab9c691841ab0931d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f080091c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efde0142cf90ff668b9757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c2f56855b18f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0099d71bb0d2f443e77a44e8c4b0455d95b19c73ef4c98f775aad9e1b317b3cc48f7ad1d82ea6ad6c3c7d943fb0157c250e2ba56301e25c19a7e37ce880bed8a8e1538560f2be7d4cca6539277505826bd61bad2bcd4914344d4a27b29d2eb89bdc7a702e485d68c04e8f6b05336bf8d8e116605eaf375a592fe2382763c3cba76a0e4029dad5d37dd77abb1b7d2e2de23a4131e45ed81123ad6fa4f8b92c47e00000000000000774c"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003020002020008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1be31, r5, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

3.480004288s ago: executing program 4 (id=6345):
r0 = socket$kcm(0x2, 0x5, 0x84)
mkdir(0x0, 0x0)
unlink(0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000040), 0x2)
sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000a40)={&(0x7f0000000580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000600)=""/211, 0xd3}, {&(0x7f0000000700)=""/218, 0xda}, {&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000240)=""/19, 0x13}, {&(0x7f0000000900)=""/23, 0x17}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x6, &(0x7f00000009c0)=""/86, 0x56}, 0x10002)
sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x1, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000300)="e4", 0x1}], 0x1}, 0x4000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="110000000400000004000000"], 0x50)

3.479505818s ago: executing program 3 (id=6346):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0x2, 0x5, 0x84)
mkdir(&(0x7f0000000000)='./file0\x00', 0xbe9bac6d2d0f4e0b)
mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0xb, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x0)
sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x1, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000300)="e4", 0x1}], 0x1}, 0x4000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYBLOB="3eca", @ANYRES8], 0x9a)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x5, 0x70, 0x0, &(0x7f0000000cc0)="25a688a800a344000000391ac8349e0a000000adbcb91d026d289cad210a2be7ddd100b4ac7442518bd3f43230245ff9055900f1487ca0816733018df050f4ffd750e98aab954f3ea18bde8bc45c494691b5654a8dbdf6d87327f7858e1f44d71b1cd893bcd545ecbd269d3875bd83ae", 0x0, 0xd00, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.023811824s ago: executing program 2 (id=6349):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c0000005a006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36500001a44dd021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0x0, 0x7fffffffffffffff}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="611234000000000061131b8a0fb7ca9871380000000000bf1000000000000025000200091b00003d200000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f067020000140000ae0015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f7500000006000000540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94)
close(0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, 0x0, 0x40800)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x9, 0x100004, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10000000, 0xfffffffe}, 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
ioctl$TUNSETVNETBE(r4, 0x400454de, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket$kcm(0xa, 0x5, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e0000000000000007004000090000", @ANYBLOB], 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000060000008000", @ANYRES32=r6, @ANYRES32], 0x50)
r7 = socket$kcm(0xa, 0x5, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890b, &(0x7f0000000000)={r7})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="00e10000d3a8"})
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)

2.554806602s ago: executing program 4 (id=6350):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbd, 0x8, 0x2, 0x40, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x4}, 0x0, 0x8, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0xc, 0x200000000000013d, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d}, 0x94)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="00000000000100000000000000000100000000001a401f007aebb2608a1c0d8294dc39e2eaa4e5f97bff8f10e2f49330a806309161669d0f1e754625dd2c818f21e79a156f4b8b082ef075eabf85d4f20dbf852a9de6ca3d7983a5e7a601169568275ff541eabce5", @ANYRES32, @ANYBLOB='\x00'/25], 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r3 = socket$kcm(0x10, 0xe, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180800000000000f000000000000000071123d00000000009500000000000000d6a93bcefb058bb0b3ae2674c6cf00af730df07208403c32a402e39f67ab5763001eb855a5fc5d55b3b72e5e56eb2d91e1a2fa0b3ba6bb37a45f853cfd537da93c719bfa6aaf5927bc74c3634a62867f127ec974d81bf9ea0c78f44000e0e72e796196cf533545836c1cf0ed7ae9048297256a63b971c7aac031761b919e3d8a4ef7ceaaaa7d30c190b3cd32d7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004500)}], 0x1}, 0x0)
r4 = socket$kcm(0x2b, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004)
close(r4)
socket$kcm(0xa, 0x6, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x90010022}]}, 0x90)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003020002000008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000fc0)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1be31, r8, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r9)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

2.553323292s ago: executing program 5 (id=6360):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c0000005a006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36500001a44dd021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0x0, 0x7fffffffffffffff}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="611234000000000061131b8a0fb7ca9871380000000000bf1000000000000025000200091b00003d200000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f067020000140000ae0015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f7500000006000000540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94)
close(0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, 0x0, 0x40800)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x9, 0x100004, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10000000, 0xfffffffe}, 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
ioctl$TUNSETVNETBE(r4, 0x400454de, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket$kcm(0xa, 0x5, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e0000000000000007004000090000", @ANYBLOB], 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e0000000600000080000000000000", @ANYRES32=r6, @ANYRES32], 0x50)
r7 = socket$kcm(0xa, 0x5, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890b, &(0x7f0000000000)={r7})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="00e10000d3a8"})
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)

2.552797122s ago: executing program 1 (id=6351):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="190000000000000000000000000000000000000005ffffff9500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @multicast})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x2, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b5, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x6, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000380)=ANY=[@ANYBLOB='grep0 8'], 0xa)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000180)={'wlan0\x00'})
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/2'], 0x6a)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], 0x0}, 0x94)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x4)
close(r5)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xfffffffffffffdc5, &(0x7f00000011c0)=[{&(0x7f00000000c0)="5c00000013006bcc9e3be35c6e17aa31066b876c1d0000007ea6e763160af36504001ac0080010000400020002000000ef64bc24eab556a705251e618294ff0051f60a9553adac000e4509c5bbcd72c6c953ec3ded4d8217961381fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

2.552403972s ago: executing program 2 (id=6352):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
r1 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0x76, &(0x7f0000000000), 0x8)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x10, 0x3, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x8)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x3)
r3 = syz_clone(0x10400, &(0x7f0000000580)="8555451985e93ae51af05b6faec3bc8aa826dc25ea7622f4b639d1aec6e11b4509d48399a1eccb34f145a531180e02dae7b3b76502d3429b5311c8aeda564a0304188c52", 0x44, 0x0, &(0x7f00000006c0), 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)}, {&(0x7f00000004c0)="f80ec2", 0x3}], 0x2, 0x0, 0x0, 0x2663}, 0x0)
syz_open_procfs$namespace(r3, &(0x7f0000000840)='ns/mnt\x00')
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x104010, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x3, 0xad, 0x9, 0x2, 0x0, 0x9d, 0x800, 0x5, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x8820, 0x40000, 0x3, 0x7, 0x0, 0x10000, 0xa}, r3, 0x9, r4, 0x9)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000980)="1400000036000b63717abc0d0ed898000500cf77", 0x14}], 0x1}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x2f9, 0x6488, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb080600017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28)

2.400846611s ago: executing program 3 (id=6353):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000), 0x8)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x8)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x1, &(0x7f0000000000)=@raw=[@ldst], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x3)
r2 = syz_clone(0x10400, &(0x7f0000000580)="8555451985e93ae51af05b6faec3bc8aa826dc25ea7622f4b639d1aec6e11b4509d48399a1eccb34f145a531180e02dae7b3b76502d3429b5311c8aeda564a0304188c520b9116aba382e63fad54ba2a4357bc3c54decb76be04b191009485f9eb3ccc97333eca2879d8ac8ce1272cf6879c6ef81da9ec7709e9aa0a3a95daedd999a92404dc9d92d3a0befa8f4e93a829a3d37d7d5ef06d945e84aac44c3bcd2b4b85afa8fdbed3d060f2ac21406b19df1e8ecc", 0xb4, 0x0, &(0x7f00000006c0), &(0x7f0000000700)="04d978da36bb2c23a54ea29983340e62175bf3fbb155019f2d08f30d06fd1e1c6cbece4588724071")
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80e", 0x2}], 0x2, 0x0, 0x0, 0x2663}, 0x0)
syz_open_procfs$namespace(r2, &(0x7f0000000840)='ns/mnt\x00')
r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x104010, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x3, 0xad, 0x9, 0x2, 0x0, 0x9d, 0x800, 0x5, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x8820, 0x40000, 0x3, 0x7, 0x0, 0x10000, 0xa}, r2, 0x9, r3, 0x9)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000980)="1400000036000b63717abc0d0ed898000500cf77", 0x14}], 0x1}, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x2f9, 0x6488, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb080600017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28)

2.098629388s ago: executing program 1 (id=6354):
socket$kcm(0xa, 0x5, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x9, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r2 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161)
sendmsg$inet(r2, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='GPL\x00')

1.819527415s ago: executing program 2 (id=6355):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c0000005a006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36500001a44dd021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0x0, 0x7fffffffffffffff}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="611234000000000061131b8a0fb7ca9871380000000000bf1000000000000025000200091b00003d200000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f067020000140000ae0015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f7500000006000000540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94)
close(0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, 0x0, 0x40800)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x9, 0x100004, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10000000, 0xfffffffe}, 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
ioctl$TUNSETVNETBE(r4, 0x400454de, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket$kcm(0xa, 0x5, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e0000000000000007004000090000", @ANYBLOB], 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYRES32], 0x50)
r7 = socket$kcm(0xa, 0x5, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890b, &(0x7f0000000000)={r7})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="00e10000d3a8"})
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)

1.818844405s ago: executing program 4 (id=6356):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r0 = socket$kcm(0x2, 0x2, 0x73)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1)
r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000cc0)={@cgroup, r1, 0x2c, 0x0, 0x0, @void, @value=r1}, 0x20)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000005c0)={<r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b35, &(0x7f0000000000)={'wlan1\x00', @remote})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0], 0x0, 0x86, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f0000000680), 0x8, 0x2b, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0xa, [@struct={0x0, 0x4, 0x0, 0x4, 0x1, 0x8000, [{0xb, 0x0, 0xfffff801}, {0xd, 0x0, 0x1e57}, {0xc, 0x0, 0xffffff00}, {0x1, 0x5, 0x7}]}]}, {0x0, [0x30, 0x61, 0x2e, 0x30, 0x0, 0x2e, 0x2e, 0x5f]}}, &(0x7f00000008c0)=""/166, 0x5e, 0xa6, 0x1, 0xd09}, 0x28)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="6c006961d71b00008c000000000000000ec598fd1aff", @ANYRES32=r1, @ANYBLOB="590500"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="010000000200"/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4}, [@exit, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x24}]}, &(0x7f0000000100)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000001b80)=""/4096, 0x41000, 0x44, '\x00', r4, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000a40)=[r6], &(0x7f0000000a80)=[{0x2, 0x4, 0x10}], 0x10, 0x4000000}, 0x94)
r7 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000b80)="ffcec4b87067fb11f9b11866d229fbdf251b783c504a968c10244d1b1bf41405b219", 0x22}], 0x1}, 0x0)
getpid()
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200})
syz_clone(0x40049000, &(0x7f0000000240)="a038d572f369eefc1219efa2207a0298c07e53e634642ed3892b9014ee895b1898183fa8a3bf20bac93ca2200142d9c79b9a5cc4566d00b0bff495def4c1657dd2c874e348471e3267b410a6e7a63f5ce487826a5057c72d9d9712de4f820348c42ff7d4f5b848d5e4926349632913ac1b3889207f400d5c7192320503bf9ef718d8c2212a6a702cc50a5e7e51e0cb606b5243090ae2ece2e5f21de134238a9bd49afb947fb7c013c2c98ea528353e7dbcc04a20573bcc71bdc4e80996797b70dacac7144f27246cb0d0d78a2ece340fd43835086591cf4220215d010595ccd924", 0xe1, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000340)="efbbc08bb4aa60acecb0bb2468537f9e9865fd0488c9ffbb84fb839cf34d3a2ddd7f100fe433b6f08ad2ac9686ead9b2984a551f6df52658e20c7b4fc2ba49a21d254a6e1b")
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8283, 0xa4096, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe}, 0x10205, 0x7, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x102ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080))

1.812488485s ago: executing program 5 (id=6357):
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000c40)='2', 0x1}], 0x1}, 0x8400)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x1000000, 0xe, 0x0, &(0x7f0000000240)="e0b9547ed387c6e950a4e1f95bec", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000011c0)="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", 0x5b4}], 0x1}, 0x0)

1.698195091s ago: executing program 1 (id=6358):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5d31, 0x80410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x11201, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4136}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000", 0x3}], 0x1}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000000010000081100000900000001", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\t\x00'/21], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r1}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0020000000000009000000001000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x2d, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x6d, 0x8, 0x8, &(0x7f0000000340)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r3, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xf, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0xffd}, 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8970, &(0x7f0000000080))
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r7}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r5}, 0x20)
close(r5)

1.697618491s ago: executing program 3 (id=6359):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'pim6reg1\x00'})
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000200)={'dvmrp0\x00'})
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x6}, 0x94)

1.574441588s ago: executing program 5 (id=6361):
r0 = socket$kcm(0x2, 0x5, 0x84)
mkdir(0x0, 0x0)
unlink(0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000040), 0x2)
sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000a40)={&(0x7f0000000580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000600)=""/211, 0xd3}, {&(0x7f0000000700)=""/218, 0xda}, {&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000240)=""/19, 0x13}, {&(0x7f0000000900)=""/23, 0x17}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x6, &(0x7f00000009c0)=""/86, 0x56}, 0x10002)
sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x1, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000300)="e4", 0x1}], 0x1}, 0x4000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="110000000400000004000000"], 0x50)

1.360227611s ago: executing program 3 (id=6362):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
close(0xffffffffffffffff)
socket$kcm(0xa, 0x6, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x90010022}]}, 0x90)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003020002020008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1be31, r5, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

1.315569354s ago: executing program 1 (id=6372):
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000c40)='2', 0x1}], 0x1}, 0x8400)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x1000000, 0xe, 0x0, &(0x7f0000000240)="e0b9547ed387c6e950a4e1f95bec", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000011c0)="6f380fcfdec19aef22100d79ee6744559f2d88215cf2bfcab54a39525f06ae22cb331091f1077ac9159fdc14139b98d01e37d599aa144edca64c70c5ac77a41b85402ebdd078da95481d035d7be2c95408ed1213b7ffdf20750f9c3be031e3e4aadd1f8710377c22de7b6bb61a9ae53569cc39367632cf997924dff246985a2c029587b158750a22345076475b7d2c80b8320b646a34b3cedd9ba9752ead11d5b6e644ae052241dba088a25b7d4f023e3052e2dca12aab3fb0449dcfa68ddcd56866dd70d4216d9de4e548c590537666b08d2dbbe2b8f1b7b483a9a8ee262edf4b3457d1e6cb33df75cb0191d17db1dc5bf1de3b121bcced1febb1589d51b5b05bc3d22fdaa884f28b0a3365987a982caf3dcf848ab2c3b5868f088a533897e4b8abbc4a40fdfd90047a58200814af887abbe438f2a03df142b5504ed74e12a80bf586d08207cb852ef73b165bc498d1b8438840adeb7e4f7ab68546ef445fcc349b3d73c8769dbe22404cd9fc05379b0e43e14f1027b72e8455e86e0f4a6361ab647215fec08d5bd34f1275670bccba6d9d569f65f3bb5b15f52b9632a882dcba80a47c90ab780d4fd4fa2f877b20add9fd93a4798b7aa15246226e487056b220bc5b7b76a9b0c077e1d398bb55c5ec51caa295fa425f7603529c0660b75465b4205a0a0edd9c1c153df027c462b0fc31328c27d336973d6cbee95f4340a46a269b45395f9834f292c73aba12a0c9d7b378a426ebaa2915579b0ed5a26787116298546df0248cefaa87997473c29d4b5bca43429b3c30430254beab736219c5ac24a685d8fd68a5131b91f8c3b4933f36c69965efd26aec16c1bbd9779eaf070ac813660148daa060883073ad349afff9bcbd9966884152095c92abe0ab2703cf1fd5d3568bf1cccd6069fc0aa71b819880fd1d294c9c34a84414bfec0b2651fb9c5a2617408803791853a779fcfc8bc9cd945b7b70ccee1cec10da606a60cb8bf984a4dcf5ad581dbdfc3d082ea5bf7f59f2d1ad464329e457d419311582c882d97cfb0a056493c67a9af7838d380c98c085c43fc1ac79b7beb21ed5d53766e275e09149151137c60e1a67af457ed4bc0977e6640ad8e4363096e048ee75313e91e8794758470efb9f609f2919ce389f90543625e2dc4173532f889ba2a1e97fb29c290ece1ca60e03e58f29253e75b78b5fb9a0a4ea8890c5742e497865ee0208f5740e73c4f6f6492653540fcb5e45d94d9d18c5fe6030681283ab441852abb607fd97641845cd617d9ac08f33a2bfb458c773947d34821eaf404b1c5026771e518025f5d1cb2be45a708485dddf9583dc0811958f03bafe5e43ebd8c9312607415dd2192fef2e69c60de098066e0f6c4895cb932432ae062b0c876b8f5023f26ef0923ba21679f7cc3c25fdd0ef65d878e1efc6607a88f210cca00669f28c3c3c1670b8cefb4eb2ee399af5831163751a5a1cc4b7637ee87c63d705f79e901784ee8f14cb50c509c952360edbc7fce126e3bca6ce4a6197a5c1577d7e8359f99b6214c2fff17e637af4ea4b9ed31c0bda705fa50b8864f86328d0cd8f6410fcc4bf51d5977d4fcb7f86cf134f1967a72fe11e38881b92051fc9bbdc212ef699463ec2a5b5a8e8c9dd86454990741deef8a23ac7a71a998b0cf1fdd955e0c6653930c5dc39904f141672f5de5b86ed1184405290e2e88ce7bdd10f338ce7a8a8e9de51ec36f08bea720b7785d8c3ede3a1a7e5136b384bc014a6b8079cd68ee4409f20bc60f192170235b4a3ed27d12110983d2f6f4a5a8eb7b9474c4fcc8cbfff8f2177cad992dc9989c99c9133bf2198b8863ca6ebe85e8d4ea4fbc10e0be81af750ca1cd4207b2585917dc576f882e93235d33eb0a79a23fa68b8d65da078dc31e9213995c5fb8e294e8f891743dfbedb24c03cb7b0318250c922b18149fc9d238671ddd1967f60126e4ea14b6d88e228ca2ab9ceade5acc87544448eaa50217639654783baf2a448e28a14c0bf4ad06c209fe628fc17517829e7321026b9170770566db61e7f1b35163b4e0d6b261fda", 0x5b4}], 0x1}, 0x0)

1.242178338s ago: executing program 2 (id=6363):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xdf, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x408003, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x0, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0xffff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x15, 0x5, 0x0)
setsockopt$sock_attach_bpf(r2, 0x114, 0x3, 0x0, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [<r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x88}, 0x14002)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r6}, &(0x7f0000000300), &(0x7f0000000340)='%-5lx  \x00'}, 0x20)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x840)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x55, 0x1, 0x2, 0x0, 0x0, 0x3ff2, 0xa892, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x1, 0x4}, 0x14105, 0x32, 0x6, 0x8, 0x2, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
recvmsg$unix(r7, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0)
socket$kcm(0xa, 0x2, 0x88)

1.234964008s ago: executing program 1 (id=6364):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0x2, 0x5, 0x84)
mkdir(&(0x7f0000000000)='./file0\x00', 0xbe9bac6d2d0f4e0b)
mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0xb, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x0)
sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x1, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000300)="e4", 0x1}], 0x1}, 0x4000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYBLOB="3eca", @ANYRES8], 0x9a)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x5, 0x70, 0x0, &(0x7f0000000cc0)="25a688a800a344000000391ac8349e0a000000adbcb91d026d289cad210a2be7ddd100b4ac7442518bd3f43230245ff9055900f1487ca0816733018df050f4ffd750e98aab954f3ea18bde8bc45c494691b5654a8dbdf6d87327f7858e1f44d71b1cd893bcd545ecbd269d3875bd83ae", 0x0, 0xd00, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50)

963.828574ms ago: executing program 4 (id=6365):
r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="2b64657669636573202b667265657a6572202b6e65745f7072696f20853e95651549c2c173d3836e97216a522798e928197b6a32f69c9dc1e6d24c521c39323ccd671c29fdf7a8bc1dbc939d572f25549843d263d2206efc33222bf0d037f75ff2fca0ae21810100821721d37760b49fb12f73931cf7d5213b510a9ae8fc0ff7525c55664c5420812e3846af89b2c708c53c44f885e90fe6f401709c6330596c"], 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3000000}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000005c0)=""/222, 0x0, 0x8}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x10c002, 0x7, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5d31, 0x40020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$sock(0xffffffffffffffff, 0x0, 0x40)
r1 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0x85, &(0x7f0000000000), 0x90)
socketpair(0xa, 0xa, 0x5, &(0x7f0000000240)={<r2=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000280)={r2})
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYRESHEX=r3], 0x9)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r3], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000500000004000000dd0a000005000000", @ANYRES32=r5, @ANYBLOB="002a67fe0608599c7b1c95eeffffff7f00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x48)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x2, 0x5, 0x84)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1e, 0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r7, @ANYRES8=r5], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x8100, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$sock_attach_bpf(r6, 0x84, 0x85, &(0x7f0000000000), 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x6}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

759.932986ms ago: executing program 2 (id=6366):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
r1 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0x76, &(0x7f0000000000), 0x8)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x10, 0x3, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x8)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x3)
r3 = syz_clone(0x10400, &(0x7f0000000580)="8555451985e93ae51af05b6faec3bc8aa826dc25ea7622f4b639d1aec6e11b4509d48399a1eccb34f145a531180e02dae7b3b76502d3429b5311c8aeda564a0304188c52", 0x44, 0x0, &(0x7f00000006c0), 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)}, {&(0x7f00000004c0)="f80ec2", 0x3}], 0x2, 0x0, 0x0, 0x2663}, 0x0)
syz_open_procfs$namespace(r3, &(0x7f0000000840)='ns/mnt\x00')
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x104010, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x3, 0xad, 0x9, 0x2, 0x0, 0x9d, 0x800, 0x5, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x8820, 0x40000, 0x3, 0x7, 0x0, 0x10000, 0xa}, r3, 0x9, r4, 0x9)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000980)="1400000036000b63717abc0d0ed898000500cf77", 0x14}], 0x1}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x2f9, 0x6488, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb080600017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28)

579.612316ms ago: executing program 3 (id=6367):
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1}, 0x48)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x40, r1}, 0x38)

388.568888ms ago: executing program 5 (id=6368):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000840)=""/262, 0x37, 0x106, 0x1}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000500)=r1, 0x4)
r3 = getpid()
r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x3, 0x0, 0x0, 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x0, 0x400000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8000000000000000}, r3, 0x10, 0xffffffffffffffff, 0xa)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x3, @loopback}, 0x10, 0x0}, 0x200440e4)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ac0)=@o_path={&(0x7f0000000a80)='./file0\x00', 0x0, 0x0, r1}, 0x18)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="020000000100"/28], 0x50)
close(r6)
r7 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000700)}], 0x1}, 0x24048010)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x0, 0x0)

186.161879ms ago: executing program 5 (id=6369):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c0000005a006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36500001a44dd021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0x0, 0x7fffffffffffffff}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="611234000000000061131b8a0fb7ca9871380000000000bf1000000000000025000200091b00003d200000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f067020000140000ae0015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f7500000006000000540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94)
close(0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, 0x0, 0x40800)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x9, 0x100004, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10000000, 0xfffffffe}, 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
ioctl$TUNSETVNETBE(r4, 0x400454de, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket$kcm(0xa, 0x5, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e0000000000000007004000090000", @ANYBLOB], 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e0000000600000080000000000000", @ANYRES32=r6, @ANYRES32], 0x50)
r7 = socket$kcm(0xa, 0x5, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890b, &(0x7f0000000000)={r7})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="00e10000d3a8"})
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)

137.281812ms ago: executing program 1 (id=6370):
socket$kcm(0xa, 0x5, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x9, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r2 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161)
sendmsg$inet(r2, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='GPL\x00')

127.084793ms ago: executing program 3 (id=6371):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000), 0x8)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x8)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x1, &(0x7f0000000000)=@raw=[@ldst], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x3)
r2 = syz_clone(0x10400, &(0x7f0000000580)="8555451985e93ae51af05b6faec3bc8aa826dc25ea7622f4b639d1aec6e11b4509d48399a1eccb34f145a531180e02dae7b3b76502d3429b5311c8aeda564a0304188c520b9116aba382e63fad54ba2a4357bc3c54decb76be04b191009485f9eb3ccc97333eca2879d8ac8ce1272cf6879c6ef81da9ec7709e9aa0a3a95daedd999a92404dc9d92d3a0befa8f4e93a829a3d37d7d5ef06d945e84aac44c3bcd2b4b85afa8fdbed3d060f2ac21406b19df1e8ecc", 0xb4, 0x0, &(0x7f00000006c0), &(0x7f0000000700)="04d978da36bb2c23a54ea29983340e62175bf3fbb155019f2d08f30d06fd1e1c6cbece4588724071")
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80e", 0x2}], 0x2, 0x0, 0x0, 0x2663}, 0x0)
syz_open_procfs$namespace(r2, &(0x7f0000000840)='ns/mnt\x00')
r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x104010, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x3, 0xad, 0x9, 0x2, 0x0, 0x9d, 0x800, 0x5, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x8820, 0x40000, 0x3, 0x7, 0x0, 0x10000, 0xa}, r2, 0x9, r3, 0x9)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000980)="1400000036000b63717abc0d0ed898000500cf77", 0x14}], 0x1}, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x2f9, 0x6488, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb080600017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28)

124.330413ms ago: executing program 2 (id=6373):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5d31, 0x80410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x11201, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4136}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000", 0x3}], 0x1}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000000010000081100000900000001", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\t\x00'/21], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r1}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0020000000000009000000001000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x2d, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x6d, 0x8, 0x8, &(0x7f0000000340)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r3, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xf, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0xffd}, 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8970, &(0x7f0000000080))
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r7}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r5}, 0x20)
close(r5)

0s ago: executing program 4 (id=6374):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)="5dfb72268ef188f5fc23fe7220d271e856af1487f85d73bd77fb130ed2788b50292a62390411cc18e0f6c36174a0b8c70d412f1113b96735d1202320cc40782635fadd6634da71407eed3c29c35dee", 0x0, 0x3}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce}, 0x38)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

): Releasing backup interface
[ 1223.797343][T23047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1223.870033][T23047] bond0 (unregistering): Released all slaves
[ 1224.408669][T23065] netlink: 'syz.5.5496': attribute type 29 has an invalid length.
[ 1224.672512][T23055] device syzkaller0 entered promiscuous mode
[ 1225.169768][T23065] netlink: 'syz.5.5496': attribute type 29 has an invalid length.
[ 1228.428493][T23122] netlink: 'syz.4.5511': attribute type 29 has an invalid length.
[ 1228.730409][T23093] netlink: 'syz.3.5503': attribute type 14 has an invalid length.
[ 1228.752559][T23093] netlink: 64283 bytes leftover after parsing attributes in process `syz.3.5503'.
[ 1228.762661][T23122] netlink: 'syz.4.5511': attribute type 29 has an invalid length.
[ 1228.890565][T23126] device syzkaller0 entered promiscuous mode
[ 1228.949842][T23133] FAULT_INJECTION: forcing a failure.
[ 1228.949842][T23133] name failslab, interval 1, probability 0, space 0, times 0
[ 1229.002101][T23133] CPU: 1 PID: 23133 Comm: syz.1.5512 Not tainted syzkaller #0
[ 1229.009675][T23133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1229.019870][T23133] Call Trace:
[ 1229.023197][T23133]  <TASK>
[ 1229.026175][T23133]  dump_stack_lvl+0x188/0x24e
[ 1229.031033][T23133]  ? show_regs_print_info+0x12/0x12
[ 1229.036313][T23133]  ? load_image+0x400/0x400
[ 1229.040882][T23133]  ? __might_sleep+0xd0/0xd0
[ 1229.045527][T23133]  ? __lock_acquire+0x7d10/0x7d10
[ 1229.050616][T23133]  should_fail_ex+0x399/0x4d0
[ 1229.055365][T23133]  should_failslab+0x5/0x20
[ 1229.059934][T23133]  slab_pre_alloc_hook+0x59/0x310
[ 1229.065016][T23133]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[ 1229.070810][T23133]  __kmem_cache_alloc_node+0x4f/0x260
[ 1229.076241][T23133]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[ 1229.082027][T23133]  __kmalloc+0xa0/0x240
[ 1229.086266][T23133]  tomoyo_realpath_from_path+0xdf/0x5d0
[ 1229.091904][T23133]  ? tomoyo_path_number_perm+0x205/0x650
[ 1229.097616][T23133]  tomoyo_path_number_perm+0x22f/0x650
[ 1229.103146][T23133]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1229.108678][T23133]  ? ksys_write+0x1c0/0x250
[ 1229.113296][T23133]  ? __fget_files+0x28/0x4b0
[ 1229.117962][T23133]  ? __fget_files+0x28/0x4b0
[ 1229.122643][T23133]  security_file_ioctl+0x6c/0xa0
[ 1229.127708][T23133]  __se_sys_ioctl+0x48/0x170
[ 1229.132469][T23133]  do_syscall_64+0x4c/0xa0
[ 1229.136951][T23133]  ? clear_bhb_loop+0x60/0xb0
[ 1229.141701][T23133]  ? clear_bhb_loop+0x60/0xb0
[ 1229.146445][T23133]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1229.152393][T23133] RIP: 0033:0x7f79d479aeb9
[ 1229.156862][T23133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1229.176533][T23133] RSP: 002b:00007f79d56dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1229.185023][T23133] RAX: ffffffffffffffda RBX: 00007f79d4a15fa0 RCX: 00007f79d479aeb9
[ 1229.193063][T23133] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 0000000000000005
[ 1229.201144][T23133] RBP: 00007f79d56dc090 R08: 0000000000000000 R09: 0000000000000000
[ 1229.209178][T23133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1229.217302][T23133] R13: 00007f79d4a16038 R14: 00007f79d4a15fa0 R15: 00007ffdbf276788
[ 1229.225358][T23133]  </TASK>
[ 1229.302623][T23133] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1233.344548][T23160] device syzkaller0 entered promiscuous mode
[ 1234.052859][T23175] device syzkaller0 entered promiscuous mode
[ 1234.108993][T23177] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5530'.
[ 1234.360864][T23177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1234.457833][T23177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1234.572801][T23177] bond0 (unregistering): Released all slaves
[ 1234.786975][T23192] netlink: 'syz.2.5533': attribute type 14 has an invalid length.
[ 1234.805842][T23192] netlink: 64283 bytes leftover after parsing attributes in process `syz.2.5533'.
[ 1235.512807][T23207] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.5539'.
[ 1236.142064][T23218] device syzkaller0 entered promiscuous mode
[ 1236.415753][T23225] netlink: 'syz.2.5546': attribute type 10 has an invalid length.
[ 1236.749821][T23225] team0: Device hsr_slave_0 failed to register rx_handler
[ 1236.898176][T23231] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5546'.
[ 1236.909312][T23238] netlink: 'syz.3.5549': attribute type 1 has an invalid length.
[ 1236.924702][T23238] netlink: 'syz.3.5549': attribute type 4 has an invalid length.
[ 1236.937631][T23238] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.5549'.
[ 1237.186433][T23241] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5550'.
[ 1237.326600][T23245] FAULT_INJECTION: forcing a failure.
[ 1237.326600][T23245] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1237.392156][T23245] CPU: 0 PID: 23245 Comm: syz.3.5552 Not tainted syzkaller #0
[ 1237.399741][T23245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1237.409868][T23245] Call Trace:
[ 1237.413202][T23245]  <TASK>
[ 1237.416186][T23245]  dump_stack_lvl+0x188/0x24e
[ 1237.420936][T23245]  ? show_regs_print_info+0x12/0x12
[ 1237.426212][T23245]  ? load_image+0x400/0x400
[ 1237.430795][T23245]  ? __lock_acquire+0x7d10/0x7d10
[ 1237.435886][T23245]  ? __rcu_read_unlock+0x78/0xd0
[ 1237.440878][T23245]  should_fail_ex+0x399/0x4d0
[ 1237.445614][T23245]  _copy_to_user+0x2c/0x130
[ 1237.450176][T23245]  bpf_test_finish+0x4a2/0x600
[ 1237.455042][T23245]  ? convert___skb_to_skb+0x580/0x580
[ 1237.460479][T23245]  ? convert_skb_to___skb+0x420/0x420
[ 1237.465891][T23245]  ? __build_skb+0x257/0x3c0
[ 1237.470524][T23245]  bpf_prog_test_run_skb+0xc99/0x12a0
[ 1237.475940][T23245]  ? cpu_online+0xa0/0xa0
[ 1237.480306][T23245]  bpf_prog_test_run+0x31e/0x390
[ 1237.485290][T23245]  __sys_bpf+0x62b/0x780
[ 1237.489567][T23245]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1237.494990][T23245]  ? lock_chain_count+0x20/0x20
[ 1237.499882][T23245]  __x64_sys_bpf+0x78/0x90
[ 1237.504337][T23245]  do_syscall_64+0x4c/0xa0
[ 1237.508790][T23245]  ? clear_bhb_loop+0x60/0xb0
[ 1237.513498][T23245]  ? clear_bhb_loop+0x60/0xb0
[ 1237.518210][T23245]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1237.524142][T23245] RIP: 0033:0x7f407eb9aeb9
[ 1237.528580][T23245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1237.548210][T23245] RSP: 002b:00007f407fa2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1237.556669][T23245] RAX: ffffffffffffffda RBX: 00007f407ee15fa0 RCX: 00007f407eb9aeb9
[ 1237.564669][T23245] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 000000000000000a
[ 1237.572667][T23245] RBP: 00007f407fa2b090 R08: 0000000000000000 R09: 0000000000000000
[ 1237.580667][T23245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1237.588664][T23245] R13: 00007f407ee16038 R14: 00007f407ee15fa0 R15: 00007ffefe004458
[ 1237.596678][T23245]  </TASK>
[ 1238.014394][T23241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1238.126803][T23241] bond0 (unregistering): Released all slaves
[ 1238.160349][T23254] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5553'.
[ 1238.199805][T23250] netlink: 'syz.2.5553': attribute type 10 has an invalid length.
[ 1238.217567][T23250] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5553'.
[ 1238.236720][T23250] device dummy0 entered promiscuous mode
[ 1238.244064][T23250] bridge0: port 3(dummy0) entered blocking state
[ 1238.250847][T23250] bridge0: port 3(dummy0) entered disabled state
[ 1238.260099][T23250] bridge0: port 3(dummy0) entered blocking state
[ 1238.266739][T23250] bridge0: port 3(dummy0) entered forwarding state
[ 1239.093378][T23278] device syzkaller0 entered promiscuous mode
[ 1239.197689][T23280] netlink: 'syz.1.5562': attribute type 10 has an invalid length.
[ 1239.300430][T23280] team0: Device hsr_slave_0 failed to register rx_handler
[ 1239.508912][T23284] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5562'.
[ 1239.525035][T23285] netlink: 'syz.2.5563': attribute type 1 has an invalid length.
[ 1239.586969][T23285] netlink: 'syz.2.5563': attribute type 4 has an invalid length.
[ 1239.605423][T23285] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.5563'.
[ 1240.040179][T23300] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5569'.
[ 1240.081327][T23300] netlink: 'syz.1.5569': attribute type 10 has an invalid length.
[ 1240.090398][T23300] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5569'.
[ 1241.555987][T23327] device syzkaller0 entered promiscuous mode
[ 1241.862752][T23337] netlink: 'syz.5.5581': attribute type 14 has an invalid length.
[ 1241.881502][T23337] netlink: 64283 bytes leftover after parsing attributes in process `syz.5.5581'.
[ 1245.696726][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 1245.703167][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 1246.106728][T23417] FAULT_INJECTION: forcing a failure.
[ 1246.106728][T23417] name failslab, interval 1, probability 0, space 0, times 0
[ 1246.143759][T23417] CPU: 1 PID: 23417 Comm: syz.5.5608 Not tainted syzkaller #0
[ 1246.151341][T23417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1246.161465][T23417] Call Trace:
[ 1246.164799][T23417]  <TASK>
[ 1246.167792][T23417]  dump_stack_lvl+0x188/0x24e
[ 1246.172636][T23417]  ? show_regs_print_info+0x12/0x12
[ 1246.177907][T23417]  ? load_image+0x400/0x400
[ 1246.182472][T23417]  ? __might_sleep+0xd0/0xd0
[ 1246.187128][T23417]  ? __lock_acquire+0x7d10/0x7d10
[ 1246.192230][T23417]  should_fail_ex+0x399/0x4d0
[ 1246.197001][T23417]  should_failslab+0x5/0x20
[ 1246.201576][T23417]  slab_pre_alloc_hook+0x59/0x310
[ 1246.206658][T23417]  ? bpf_prog_test_run_skb+0x234/0x12a0
[ 1246.212280][T23417]  __kmem_cache_alloc_node+0x4f/0x260
[ 1246.217733][T23417]  ? bpf_prog_test_run_skb+0x234/0x12a0
[ 1246.223353][T23417]  __kmalloc+0xa0/0x240
[ 1246.227607][T23417]  bpf_prog_test_run_skb+0x234/0x12a0
[ 1246.233058][T23417]  ? lockdep_hardirqs_on+0x94/0x140
[ 1246.238409][T23417]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1246.244648][T23417]  ? cpu_online+0xa0/0xa0
[ 1246.249039][T23417]  bpf_prog_test_run+0x31e/0x390
[ 1246.254157][T23417]  __sys_bpf+0x62b/0x780
[ 1246.258484][T23417]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1246.264051][T23417]  ? lock_chain_count+0x20/0x20
[ 1246.268972][T23417]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1246.275040][T23417]  __x64_sys_bpf+0x78/0x90
[ 1246.279519][T23417]  do_syscall_64+0x4c/0xa0
[ 1246.283975][T23417]  ? clear_bhb_loop+0x60/0xb0
[ 1246.288689][T23417]  ? clear_bhb_loop+0x60/0xb0
[ 1246.293411][T23417]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1246.299336][T23417] RIP: 0033:0x7f894c39aeb9
[ 1246.303797][T23417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1246.323438][T23417] RSP: 002b:00007f894d21b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1246.331887][T23417] RAX: ffffffffffffffda RBX: 00007f894c615fa0 RCX: 00007f894c39aeb9
[ 1246.339907][T23417] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a
[ 1246.347929][T23417] RBP: 00007f894d21b090 R08: 0000000000000000 R09: 0000000000000000
[ 1246.355933][T23417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1246.363938][T23417] R13: 00007f894c616038 R14: 00007f894c615fa0 R15: 00007ffd7d6e0878
[ 1246.371990][T23417]  </TASK>
[ 1246.921941][T23429] device syzkaller0 entered promiscuous mode
[ 1247.218041][T23440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5616'.
[ 1248.163074][T23460] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.5621'.
[ 1248.482763][T23460] debugfs: Directory '!!
' with parent 'ieee80211' already present!
[ 1250.232287][T23485] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5630'.
[ 1250.549370][T23502] netlink: 'syz.2.5635': attribute type 10 has an invalid length.
[ 1251.797161][T23531] netlink: 'syz.2.5643': attribute type 1 has an invalid length.
[ 1251.835088][T23531] netlink: 'syz.2.5643': attribute type 4 has an invalid length.
[ 1251.880493][T23531] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.5643'.
[ 1252.219732][T23533] netlink: 'syz.3.5644': attribute type 3 has an invalid length.
[ 1252.369777][T23533] netlink: 'syz.3.5644': attribute type 1 has an invalid length.
[ 1252.460527][T23533] netlink: 198452 bytes leftover after parsing attributes in process `syz.3.5644'.
[ 1253.712323][T23559] netlink: 136 bytes leftover after parsing attributes in process `syz.5.5651'.
[ 1254.759238][T23583] netlink: 'syz.3.5659': attribute type 1 has an invalid length.
[ 1254.773970][T23583] netlink: 'syz.3.5659': attribute type 4 has an invalid length.
[ 1254.793872][T23583] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.5659'.
[ 1258.114440][T23609] netlink: 'syz.2.5668': attribute type 10 has an invalid length.
[ 1258.139313][T23609] bridge0: port 4(netdevsim0) entered blocking state
[ 1258.161721][T23609] bridge0: port 4(netdevsim0) entered disabled state
[ 1258.234291][T23609] device netdevsim0 entered promiscuous mode
[ 1258.276192][T23609] bridge0: port 4(netdevsim0) entered blocking state
[ 1258.283629][T23609] bridge0: port 4(netdevsim0) entered forwarding state
[ 1258.521387][T23621] tap0: tun_chr_ioctl cmd 1074025681
[ 1259.060383][T23637] netlink: 136 bytes leftover after parsing attributes in process `syz.5.5677'.
[ 1259.285649][T23644] netlink: 'syz.1.5679': attribute type 1 has an invalid length.
[ 1259.326432][T23644] netlink: 'syz.1.5679': attribute type 4 has an invalid length.
[ 1259.341332][T23644] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.5679'.
[ 1260.557799][T23661] netlink: 'syz.5.5685': attribute type 3 has an invalid length.
[ 1260.634135][T23661] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.5685'.
[ 1260.893096][T23669] netlink: 'syz.5.5685': attribute type 1 has an invalid length.
[ 1261.045128][T23669] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.5685'.
[ 1261.304255][T23676] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5689'.
[ 1261.928205][T23694] netlink: 136 bytes leftover after parsing attributes in process `syz.4.5695'.
[ 1263.018857][T23720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5704'.
[ 1263.090546][T23720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5704'.
[ 1263.205944][T23720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5704'.
[ 1263.728165][T23736] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5706'.
[ 1264.972570][T23761] netlink: 'syz.5.5713': attribute type 1 has an invalid length.
[ 1265.046563][T23761] netlink: 'syz.5.5713': attribute type 4 has an invalid length.
[ 1265.109135][T23761] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.5713'.
[ 1265.757300][T23767] netlink: 'syz.4.5715': attribute type 10 has an invalid length.
[ 1265.926076][T23767] bridge0: port 4(netdevsim0) entered blocking state
[ 1266.067639][T23767] bridge0: port 4(netdevsim0) entered disabled state
[ 1266.337033][T23767] device netdevsim0 entered promiscuous mode
[ 1266.373581][T23767] bridge0: port 4(netdevsim0) entered blocking state
[ 1266.384080][T23767] bridge0: port 4(netdevsim0) entered forwarding state
[ 1266.633454][T23780] tap0: tun_chr_ioctl cmd 1074025681
[ 1267.412418][T23801] netlink: 'syz.1.5725': attribute type 1 has an invalid length.
[ 1267.441578][T23801] netlink: 'syz.1.5725': attribute type 4 has an invalid length.
[ 1267.449888][T23801] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.5725'.
[ 1268.265296][ T4274] Bluetooth: hci5: command 0x0406 tx timeout
[ 1268.387144][T23819] netlink: 'syz.4.5730': attribute type 3 has an invalid length.
[ 1268.726141][T23819] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5730'.
[ 1269.569417][T23817] netlink: 'syz.4.5730': attribute type 1 has an invalid length.
[ 1269.721685][T23817] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.5730'.
[ 1270.100080][T23831] netlink: 136 bytes leftover after parsing attributes in process `syz.5.5732'.
[ 1271.276333][T23841] netlink: 'syz.5.5734': attribute type 10 has an invalid length.
[ 1271.417151][T23841] bridge0: port 4(netdevsim0) entered blocking state
[ 1271.502317][T23841] bridge0: port 4(netdevsim0) entered disabled state
[ 1271.620094][T23841] device netdevsim0 entered promiscuous mode
[ 1271.651491][T23841] bridge0: port 4(netdevsim0) entered blocking state
[ 1271.660458][T23841] bridge0: port 4(netdevsim0) entered forwarding state
[ 1271.924950][T23847] tap0: tun_chr_ioctl cmd 1074025681
[ 1272.416605][T23853] netlink: 'syz.1.5737': attribute type 1 has an invalid length.
[ 1272.459366][T23853] netlink: 'syz.1.5737': attribute type 4 has an invalid length.
[ 1272.484059][T23853] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.5737'.
[ 1274.091336][T23878] netlink: 'syz.3.5745': attribute type 3 has an invalid length.
[ 1274.108929][T23887] netlink: 'syz.3.5745': attribute type 1 has an invalid length.
[ 1274.117740][T23887] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.5745'.
[ 1274.129003][T23878] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5745'.
[ 1274.974585][T23913] netlink: 'syz.4.5754': attribute type 1 has an invalid length.
[ 1275.020736][T23913] netlink: 'syz.4.5754': attribute type 4 has an invalid length.
[ 1275.065567][T23913] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.5754'.
[ 1275.252996][T23912] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5756'.
[ 1275.325106][T23915] netlink: 'syz.3.5756': attribute type 10 has an invalid length.
[ 1275.336526][T23915] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5756'.
[ 1276.508770][T21770] Bluetooth: hci3: ISO packet for unknown connection handle 3852
[ 1277.660257][T23951] netlink: 'syz.2.5767': attribute type 1 has an invalid length.
[ 1277.679163][T23951] netlink: 'syz.2.5767': attribute type 4 has an invalid length.
[ 1277.718313][T23951] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.5767'.
[ 1278.240264][T23968] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5771'.
[ 1278.262916][T23968] netlink: 'syz.1.5771': attribute type 10 has an invalid length.
[ 1278.271192][T23968] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5771'.
[ 1281.247191][T21770] Bluetooth: hci1: ISO packet for unknown connection handle 3852
[ 1281.443764][T23996] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.5779'.
[ 1282.201248][T24010] netlink: 'syz.4.5785': attribute type 1 has an invalid length.
[ 1282.222246][T24010] netlink: 'syz.4.5785': attribute type 4 has an invalid length.
[ 1282.332583][T24010] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.5785'.
[ 1283.684334][ T4274] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1283.703825][T11482] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1283.713086][ T4274] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1283.721712][ T4274] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1283.731156][ T4274] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1283.738995][T11482] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1284.864231][ T4274] Bluetooth: hci0: ISO packet for unknown connection handle 3852
[ 1285.387545][   T42] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1285.550307][   T42] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1285.901974][   T42] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1285.933961][ T4274] Bluetooth: hci2: command 0x0409 tx timeout
[ 1286.240867][   T42] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1286.500250][T24071] netlink: 'syz.3.5800': attribute type 1 has an invalid length.
[ 1286.553471][T24071] netlink: 'syz.3.5800': attribute type 4 has an invalid length.
[ 1286.612240][T24071] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.5800'.
[ 1286.743338][T24026] chnl_net:caif_netlink_parms(): no params data found
[ 1287.122583][T24026] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1287.174971][T24026] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1287.183914][T24026] device bridge_slave_0 entered promiscuous mode
[ 1287.228742][T24026] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1287.246381][T24026] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1287.285606][T24026] device bridge_slave_1 entered promiscuous mode
[ 1287.437929][T24026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1287.479661][T24026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1287.635864][   T42] device 0 left promiscuous mode
[ 1287.678479][T24026] team0: Port device team_slave_0 added
[ 1287.726664][T24026] team0: Port device team_slave_1 added
[ 1287.839892][T24026] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1287.893520][T24026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1287.980268][T24026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1288.013803][ T4274] Bluetooth: hci2: command 0x041b tx timeout
[ 1288.283166][T24106] mac80211_hwsim hwsim41 »»»»»»: renamed from wlan0
[ 1288.412826][T24026] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1288.436975][T24026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1288.475170][T24026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1288.555315][T24118] netlink: 'syz.4.5812': attribute type 1 has an invalid length.
[ 1288.586050][T24118] netlink: 'syz.4.5812': attribute type 4 has an invalid length.
[ 1288.654313][T24118] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.5812'.
[ 1288.871926][T24026] device hsr_slave_0 entered promiscuous mode
[ 1288.952417][T24026] device hsr_slave_1 entered promiscuous mode
[ 1288.987838][T24026] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1289.024020][T24026] Cannot create hsr debugfs directory
[ 1289.541017][T24140] netlink: 'syz.5.5818': attribute type 21 has an invalid length.
[ 1290.093804][ T4274] Bluetooth: hci2: command 0x040f tx timeout
[ 1290.756007][T24165] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5824'.
[ 1291.096267][T24172] netlink: 'syz.5.5827': attribute type 1 has an invalid length.
[ 1291.136889][T24172] netlink: 'syz.5.5827': attribute type 4 has an invalid length.
[ 1291.214249][T24172] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.5827'.
[ 1291.326313][T24179] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5829'.
[ 1291.349318][T24178] netlink: 'syz.2.5829': attribute type 10 has an invalid length.
[ 1291.381395][T24178] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5829'.
[ 1291.401687][   T42] device hsr_slave_0 left promiscuous mode
[ 1291.458298][   T42] device hsr_slave_1 left promiscuous mode
[ 1291.493429][   T42] bridge0: port 3(dummy0) entered disabled state
[ 1291.515028][   T42] device bridge_slave_1 left promiscuous mode
[ 1291.531876][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1291.549252][   T42] device bridge_slave_0 left promiscuous mode
[ 1291.555941][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1291.679638][   T42] device veth1_macvtap left promiscuous mode
[ 1291.723736][   T42] device veth0_macvtap left promiscuous mode
[ 1291.729958][   T42] device veth1_vlan left promiscuous mode
[ 1291.751950][   T42] device veth0_vlan left promiscuous mode
[ 1292.182576][ T4274] Bluetooth: hci2: command 0x0419 tx timeout
[ 1293.450878][   T42] team0 (unregistering): Port device team_slave_1 removed
[ 1293.506738][   T42] team0 (unregistering): Port device team_slave_0 removed
[ 1294.115072][T24221] mac80211_hwsim hwsim33 »»»»»»: renamed from wlan0
[ 1294.196266][T24026] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1294.280374][T24026] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1294.312117][T24026] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1294.394824][T24026] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1294.708044][T24235] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5843'.
[ 1294.983011][T24243] netlink: 'syz.4.5843': attribute type 10 has an invalid length.
[ 1295.057876][T24243] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5843'.
[ 1295.156453][T24026] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1295.235366][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1295.269071][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1295.311758][T24026] 8021q: adding VLAN 0 to HW filter on device team0
[ 1295.353038][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1295.383429][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1295.432095][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1295.439414][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1295.485468][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1295.500600][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1295.519816][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1295.548212][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1295.555533][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1295.597763][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1295.706516][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1295.727226][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1295.786142][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1295.878145][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1295.914037][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1295.939401][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1295.985529][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1296.041223][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1296.209540][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1296.232906][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1296.285801][T24026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1297.257875][T24290] mac80211_hwsim hwsim35 »»»»»»: renamed from wlan0
[ 1297.800780][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1297.825760][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1297.839810][T24026] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1297.954587][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1297.966810][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1298.027715][T24026] device veth0_vlan entered promiscuous mode
[ 1298.055400][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1298.070122][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1298.124753][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1298.145772][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1298.164461][T24305] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5857'.
[ 1298.189297][T24311] netlink: 'syz.2.5857': attribute type 10 has an invalid length.
[ 1298.217112][T24311] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5857'.
[ 1298.281759][T24026] device veth1_vlan entered promiscuous mode
[ 1298.336675][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1298.346958][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1298.362640][T24026] device veth0_macvtap entered promiscuous mode
[ 1298.373172][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1298.383212][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1298.429921][T24026] device veth1_macvtap entered promiscuous mode
[ 1298.466586][ T4274] Bluetooth: hci5: ISO packet for unknown connection handle 6
[ 1298.513301][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1298.569929][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1298.690793][T24026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1298.762626][T24026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1298.826536][T24026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1298.871817][T24026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1298.893887][T24026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1298.932546][T24026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1298.947614][T24026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1298.969623][T24026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1298.990757][T24026] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1299.003243][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1299.026286][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1299.243624][T24026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1299.276309][T24026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1299.326435][T24026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1299.361093][T24026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1299.373058][T24026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1299.387421][T24026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1299.397959][T24026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1299.408879][T24026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1299.423241][T24026] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1299.442808][T24026] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1299.458209][T24026] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1299.471068][T24026] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1299.485424][T24026] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1299.508167][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1299.518870][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1299.704576][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1299.712817][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1299.815572][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1299.867501][ T4358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1299.966264][ T4358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1300.156848][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1301.115329][T24360] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5873'.
[ 1301.182366][T24360] netlink: 'syz.3.5873': attribute type 10 has an invalid length.
[ 1301.202385][T24360] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5873'.
[ 1301.331856][T24366] device syzkaller0 entered promiscuous mode
[ 1302.087119][T21770] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1302.123291][T21770] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1302.133102][T21770] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1302.142354][T21770] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1302.150188][T21770] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1302.157784][T21770] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1303.007490][   T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1303.168663][T24379] chnl_net:caif_netlink_parms(): no params data found
[ 1303.970942][   T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1304.028636][T24399] netlink: 'syz.1.5886': attribute type 10 has an invalid length.
[ 1304.048046][T24399] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5886'.
[ 1304.083415][T24399] device dummy0 entered promiscuous mode
[ 1304.100975][T24399] bridge0: port 3(dummy0) entered blocking state
[ 1304.134068][T24399] bridge0: port 3(dummy0) entered disabled state
[ 1304.152963][T24399] bridge0: port 3(dummy0) entered blocking state
[ 1304.159615][T24399] bridge0: port 3(dummy0) entered forwarding state
[ 1304.261309][T21770] Bluetooth: hci1: command 0x0409 tx timeout
[ 1304.315877][   T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1304.492578][   T11] bridge0: port 4(netdevsim0) entered disabled state
[ 1304.582536][   T11] device netdevsim0 left promiscuous mode
[ 1304.595224][   T11] bridge0: port 4(netdevsim0) entered disabled state
[ 1304.622420][   T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1304.914751][T24379] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1304.954682][T24379] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1304.990117][T24379] device bridge_slave_0 entered promiscuous mode
[ 1305.109085][T24379] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1305.129172][T24379] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1305.148159][T24379] device bridge_slave_1 entered promiscuous mode
[ 1305.161069][T24415] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1305.196553][T24415] device syzkaller0 entered promiscuous mode
[ 1305.559288][T24379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1305.601547][   T11] device 0 left promiscuous mode
[ 1305.669287][T24379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1305.891650][T24379] team0: Port device team_slave_0 added
[ 1306.165229][T24379] team0: Port device team_slave_1 added
[ 1306.190859][T24434] netlink: 'syz.1.5893': attribute type 1 has an invalid length.
[ 1306.207346][T24434] netlink: 'syz.1.5893': attribute type 4 has an invalid length.
[ 1306.227128][T24434] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.5893'.
[ 1306.263171][T24441] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.5894'.
[ 1306.294141][T24441] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16)
[ 1306.333844][T21770] Bluetooth: hci1: command 0x041b tx timeout
[ 1306.619926][T24441] netlink: 'syz.2.5894': attribute type 10 has an invalid length.
[ 1306.639274][T24441] device hsr0 entered promiscuous mode
[ 1306.864912][T24379] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1306.885415][T24379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1306.977231][T24379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1307.138939][T24379] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1307.149769][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 1307.149835][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 1307.234283][T24379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1307.333333][T24379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1307.958324][T21770] Bluetooth: hci4: ISO packet for unknown connection handle 6
[ 1307.985858][T24379] device hsr_slave_0 entered promiscuous mode
[ 1308.023150][T24379] device hsr_slave_1 entered promiscuous mode
[ 1308.048783][T24379] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1308.075457][T24379] Cannot create hsr debugfs directory
[ 1308.113810][T24484] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1308.132449][T24484] device syzkaller0 entered promiscuous mode
[ 1308.414610][T21770] Bluetooth: hci1: command 0x040f tx timeout
[ 1309.544322][   T11] device hsr_slave_0 left promiscuous mode
[ 1309.567854][   T11] device hsr_slave_1 left promiscuous mode
[ 1309.602533][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1309.617269][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1309.631266][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1309.648623][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1309.775482][   T11] bridge0: port 3(dummy0) entered disabled state
[ 1309.926433][   T11] device bridge_slave_1 left promiscuous mode
[ 1309.937121][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1309.981182][   T11] device bridge_slave_0 left promiscuous mode
[ 1310.001473][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1310.089890][   T11] device veth1_macvtap left promiscuous mode
[ 1310.103753][   T11] device veth0_macvtap left promiscuous mode
[ 1310.109977][   T11] device veth1_vlan left promiscuous mode
[ 1310.130208][   T11] device veth0_vlan left promiscuous mode
[ 1310.503915][T21770] Bluetooth: hci1: command 0x0419 tx timeout
[ 1310.865247][   T11] team0 (unregistering): Port device team_slave_1 removed
[ 1310.918610][   T11] team0 (unregistering): Port device team_slave_0 removed
[ 1310.965879][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1311.398136][   T11] bond0 (unregistering): Released all slaves
[ 1311.511144][T24525] netlink: 'syz.2.5910': attribute type 10 has an invalid length.
[ 1311.555829][T24525] bridge0: port 3(dummy0) entered disabled state
[ 1311.582843][T24525] device dummy0 left promiscuous mode
[ 1311.589044][T24525] bridge0: port 3(dummy0) entered disabled state
[ 1312.602307][T24547] device syzkaller0 entered promiscuous mode
[ 1312.919548][T24379] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1312.996807][T24379] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1313.051820][T24379] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1313.087950][T24379] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1314.033826][T24379] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1314.773796][T24583] netlink: 'syz.1.5922': attribute type 29 has an invalid length.
[ 1316.265085][T24583] netlink: 'syz.1.5922': attribute type 29 has an invalid length.
[ 1316.303671][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1316.328620][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1316.384903][T24379] 8021q: adding VLAN 0 to HW filter on device team0
[ 1316.440203][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1316.484319][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1316.504735][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1316.512215][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1316.607033][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1316.631433][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1316.672792][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1316.704353][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1316.711584][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1316.735895][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1316.787623][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1316.807397][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1316.831654][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1316.925360][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1316.946370][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1316.977361][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1316.992318][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1317.024531][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1317.130663][T24379] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1317.160335][T21770] Bluetooth: hci0: ISO packet for unknown connection handle 6
[ 1317.174885][T24379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1317.189494][T24607] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.5928'.
[ 1317.264128][T24607] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16)
[ 1317.286799][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1317.307422][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1317.346392][T24607] netlink: 'syz.3.5928': attribute type 10 has an invalid length.
[ 1317.515431][T24607] device hsr0 entered promiscuous mode
[ 1317.640995][T24611] device sit0 entered promiscuous mode
[ 1318.326458][T24620] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5931'.
[ 1318.409757][T24624] netlink: 'syz.2.5931': attribute type 10 has an invalid length.
[ 1318.473720][T24624] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5931'.
[ 1318.544742][T24624] device dummy0 entered promiscuous mode
[ 1318.570280][T24624] bridge0: port 3(dummy0) entered blocking state
[ 1318.626645][T24624] bridge0: port 3(dummy0) entered disabled state
[ 1318.725490][T24624] bridge0: port 3(dummy0) entered blocking state
[ 1318.732322][T24624] bridge0: port 3(dummy0) entered forwarding state
[ 1319.528085][T24647] netlink: 'syz.5.5936': attribute type 13 has an invalid length.
[ 1319.570946][T24647] netlink: 24859 bytes leftover after parsing attributes in process `syz.5.5936'.
[ 1319.998135][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1320.056613][T24661] FAULT_INJECTION: forcing a failure.
[ 1320.056613][T24661] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1320.057899][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1320.288581][T24661] CPU: 1 PID: 24661 Comm: syz.3.5939 Not tainted syzkaller #0
[ 1320.296174][T24661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1320.306281][T24661] Call Trace:
[ 1320.309633][T24661]  <TASK>
[ 1320.312619][T24661]  dump_stack_lvl+0x188/0x24e
[ 1320.317380][T24661]  ? show_regs_print_info+0x12/0x12
[ 1320.322678][T24661]  ? load_image+0x400/0x400
[ 1320.327258][T24661]  ? __might_fault+0xa6/0x120
[ 1320.332114][T24661]  should_fail_ex+0x399/0x4d0
[ 1320.336890][T24661]  copyin+0x1b/0x120
[ 1320.340854][T24661]  _copy_from_iter+0x447/0x1130
[ 1320.345794][T24661]  ? copyout_mc+0x110/0x110
[ 1320.350367][T24661]  ? __virt_addr_valid+0x188/0x540
[ 1320.355548][T24661]  ? __virt_addr_valid+0x188/0x540
[ 1320.360720][T24661]  ? __virt_addr_valid+0x465/0x540
[ 1320.365887][T24661]  ? __check_object_size+0x500/0xa40
[ 1320.371234][T24661]  netlink_sendmsg+0x755/0xbd0
[ 1320.376073][T24661]  ? netlink_getsockopt+0x550/0x550
[ 1320.381329][T24661]  ? aa_sock_msg_perm+0x94/0x150
[ 1320.386450][T24661]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1320.391782][T24661]  ? security_socket_sendmsg+0x7c/0xa0
[ 1320.397300][T24661]  ? netlink_getsockopt+0x550/0x550
[ 1320.402558][T24661]  ____sys_sendmsg+0x5be/0x970
[ 1320.407401][T24661]  ? __sys_sendmsg_sock+0x30/0x30
[ 1320.412514][T24661]  ? __import_iovec+0x315/0x500
[ 1320.417453][T24661]  ? import_iovec+0x6f/0xa0
[ 1320.422012][T24661]  ___sys_sendmsg+0x2a2/0x360
[ 1320.426789][T24661]  ? __sys_sendmsg+0x290/0x290
[ 1320.431670][T24661]  ? __lock_acquire+0x7d10/0x7d10
[ 1320.436816][T24661]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1320.441723][T24661]  ? ct_nmi_exit+0x145/0x1c0
[ 1320.446366][T24661]  ? __x64_sys_sendmsg+0x80/0x80
[ 1320.451390][T24661]  ? lockdep_hardirqs_on+0x94/0x140
[ 1320.456680][T24661]  do_syscall_64+0x4c/0xa0
[ 1320.461164][T24661]  ? clear_bhb_loop+0x60/0xb0
[ 1320.465986][T24661]  ? clear_bhb_loop+0x60/0xb0
[ 1320.470728][T24661]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1320.476763][T24661] RIP: 0033:0x7f407eb9aeb9
[ 1320.481257][T24661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1320.500932][T24661] RSP: 002b:00007f407fa2b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1320.509401][T24661] RAX: ffffffffffffffda RBX: 00007f407ee15fa0 RCX: 00007f407eb9aeb9
[ 1320.517415][T24661] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003
[ 1320.525556][T24661] RBP: 00007f407fa2b090 R08: 0000000000000000 R09: 0000000000000000
[ 1320.533596][T24661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1320.541618][T24661] R13: 00007f407ee16038 R14: 00007f407ee15fa0 R15: 00007ffefe004458
[ 1320.549679][T24661]  </TASK>
[ 1320.592268][T24379] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1322.374090][T24684] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5943'.
[ 1322.407088][T24686] netlink: 'syz.2.5943': attribute type 10 has an invalid length.
[ 1322.482120][T24686] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5943'.
[ 1323.302416][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1323.346625][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1323.413345][T24705] netlink: 'syz.1.5947': attribute type 1 has an invalid length.
[ 1323.436350][T24705] netlink: 'syz.1.5947': attribute type 4 has an invalid length.
[ 1323.474225][T24705] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.5947'.
[ 1323.534548][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1323.587418][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1323.647388][T24379] device veth0_vlan entered promiscuous mode
[ 1323.677572][T24708] netlink: 'syz.3.5948': attribute type 10 has an invalid length.
[ 1323.716382][T24708] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5948'.
[ 1323.779061][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1323.798797][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1323.843224][T24379] device veth1_vlan entered promiscuous mode
[ 1323.927263][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1323.960005][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1324.006490][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1324.039522][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1324.060779][T24379] device veth0_macvtap entered promiscuous mode
[ 1324.095895][T24719] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5951'.
[ 1324.130235][T24723] netlink: 'syz.1.5951': attribute type 10 has an invalid length.
[ 1324.164050][T24723] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5951'.
[ 1324.221717][T24379] device veth1_macvtap entered promiscuous mode
[ 1324.288511][T24379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1324.314535][T24379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1324.324894][T24379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1324.343196][T24379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1324.363846][T24379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1324.387269][T24379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1324.411175][T24379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1324.439574][T24379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1324.478040][T24379] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1324.499725][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1324.530547][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1324.551106][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1324.568058][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1324.599721][T24379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1324.628137][T24379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1324.662331][T24379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1324.706213][T24379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1324.743596][T24379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1324.771570][T24379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1324.794563][T24379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1324.820831][T24379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1324.923641][T24379] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1324.936345][T24736] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5954'.
[ 1324.957664][T24737] netlink: 'syz.1.5954': attribute type 10 has an invalid length.
[ 1324.986640][T24737] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5954'.
[ 1325.042708][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1325.064625][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1325.117111][T24379] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1325.155763][T24379] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1325.186432][T24379] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1325.217507][T24379] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1325.442661][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1325.501719][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1325.770003][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1325.922814][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1325.965403][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1326.028745][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1326.405501][T24758] netlink: 'syz.1.5960': attribute type 1 has an invalid length.
[ 1326.620043][T24758] netlink: 'syz.1.5960': attribute type 4 has an invalid length.
[ 1326.721335][T24758] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.5960'.
[ 1328.029587][T24789] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5964'.
[ 1328.155917][T24786] netlink: 'syz.2.5964': attribute type 10 has an invalid length.
[ 1328.231876][T24786] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5964'.
[ 1328.550624][T24804] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5970'.
[ 1328.628754][T24805] netlink: 'syz.4.5970': attribute type 10 has an invalid length.
[ 1328.654972][T24805] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5970'.
[ 1328.697032][T24805] device dummy0 entered promiscuous mode
[ 1328.711149][T24805] bridge0: port 3(dummy0) entered blocking state
[ 1328.730257][T24805] bridge0: port 3(dummy0) entered disabled state
[ 1328.822860][T24805] bridge0: port 3(dummy0) entered blocking state
[ 1328.829934][T24805] bridge0: port 3(dummy0) entered forwarding state
[ 1329.273895][T24817] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5974'.
[ 1329.478747][T24815] netlink: 'syz.5.5974': attribute type 10 has an invalid length.
[ 1329.537735][T24815] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5974'.
[ 1329.588280][T24829] netlink: 'syz.4.5976': attribute type 10 has an invalid length.
[ 1329.990768][T24829] team0 (unregistering): Port device team_slave_0 removed
[ 1330.133897][T24829] team0 (unregistering): Port device team_slave_1 removed
[ 1331.074005][T24861] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5983'.
[ 1331.098963][T24861] netlink: 'syz.4.5983': attribute type 10 has an invalid length.
[ 1331.244340][T24861] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5983'.
[ 1332.122804][T24888] netlink: 105084 bytes leftover after parsing attributes in process `syz.5.5990'.
[ 1332.214138][T24888] netlink: 31 bytes leftover after parsing attributes in process `syz.5.5990'.
[ 1332.395536][T24894] sctp: [Deprecated]: syz.2.5993 (pid 24894) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1332.395536][T24894] Use struct sctp_sack_info instead
[ 1333.018615][T24912] FAULT_INJECTION: forcing a failure.
[ 1333.018615][T24912] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1333.046592][T24912] CPU: 0 PID: 24912 Comm: syz.3.5998 Not tainted syzkaller #0
[ 1333.054172][T24912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1333.064290][T24912] Call Trace:
[ 1333.067644][T24912]  <TASK>
[ 1333.070629][T24912]  dump_stack_lvl+0x188/0x24e
[ 1333.075394][T24912]  ? show_regs_print_info+0x12/0x12
[ 1333.080664][T24912]  ? load_image+0x400/0x400
[ 1333.085251][T24912]  ? __lock_acquire+0x7d10/0x7d10
[ 1333.090372][T24912]  should_fail_ex+0x399/0x4d0
[ 1333.095162][T24912]  _copy_from_user+0x2c/0x170
[ 1333.099934][T24912]  iovec_from_user+0x143/0x360
[ 1333.104781][T24912]  __import_iovec+0x6d/0x500
[ 1333.109458][T24912]  import_iovec+0x6f/0xa0
[ 1333.113877][T24912]  ___sys_sendmsg+0x252/0x360
[ 1333.118635][T24912]  ? __sys_sendmsg+0x290/0x290
[ 1333.123614][T24912]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1333.128551][T24912]  ? ct_nmi_exit+0x145/0x1c0
[ 1333.133217][T24912]  ? __x64_sys_sendmsg+0x80/0x80
[ 1333.138245][T24912]  ? lockdep_hardirqs_on+0x94/0x140
[ 1333.143521][T24912]  do_syscall_64+0x4c/0xa0
[ 1333.148101][T24912]  ? clear_bhb_loop+0x60/0xb0
[ 1333.152842][T24912]  ? clear_bhb_loop+0x60/0xb0
[ 1333.157677][T24912]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1333.163641][T24912] RIP: 0033:0x7f407eb9aeb9
[ 1333.168121][T24912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1333.187813][T24912] RSP: 002b:00007f407fa2b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1333.196314][T24912] RAX: ffffffffffffffda RBX: 00007f407ee15fa0 RCX: 00007f407eb9aeb9
[ 1333.204361][T24912] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[ 1333.212408][T24912] RBP: 00007f407fa2b090 R08: 0000000000000000 R09: 0000000000000000
[ 1333.220444][T24912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1333.228483][T24912] R13: 00007f407ee16038 R14: 00007f407ee15fa0 R15: 00007ffefe004458
[ 1333.236554][T24912]  </TASK>
[ 1333.453423][T24921] device syzkaller0 entered promiscuous mode
[ 1333.658008][T24926] netlink: 'syz.3.6002': attribute type 3 has an invalid length.
[ 1333.738703][T24926] __nla_validate_parse: 1 callbacks suppressed
[ 1333.738728][T24926] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6002'.
[ 1334.205388][T24931] netlink: 'syz.4.6003': attribute type 1 has an invalid length.
[ 1334.243800][T24931] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.6003'.
[ 1334.510669][T24938] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.6006'.
[ 1335.029895][T24951] netlink: 'syz.5.6011': attribute type 10 has an invalid length.
[ 1335.075003][T24951] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6011'.
[ 1335.182788][T24959] netlink: 'syz.3.6013': attribute type 1 has an invalid length.
[ 1335.286303][T24959] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.6013'.
[ 1337.978331][T24971] device syzkaller0 entered promiscuous mode
[ 1338.000711][T24969] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.6016'.
[ 1338.278689][T24982] FAULT_INJECTION: forcing a failure.
[ 1338.278689][T24982] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1338.346017][T24978] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6019'.
[ 1338.355964][T24982] CPU: 0 PID: 24982 Comm: syz.4.6020 Not tainted syzkaller #0
[ 1338.363522][T24982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1338.373642][T24982] Call Trace:
[ 1338.376978][T24982]  <TASK>
[ 1338.379964][T24982]  dump_stack_lvl+0x188/0x24e
[ 1338.384772][T24982]  ? show_regs_print_info+0x12/0x12
[ 1338.390057][T24982]  ? load_image+0x400/0x400
[ 1338.394647][T24982]  ? __lock_acquire+0x7d10/0x7d10
[ 1338.399803][T24982]  should_fail_ex+0x399/0x4d0
[ 1338.404586][T24982]  _copy_from_user+0x2c/0x170
[ 1338.409332][T24982]  ___sys_sendmsg+0x1c3/0x360
[ 1338.414094][T24982]  ? __sys_sendmsg+0x290/0x290
[ 1338.418971][T24982]  ? __lock_acquire+0x7d10/0x7d10
[ 1338.424117][T24982]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1338.429117][T24982]  ? ct_nmi_exit+0x145/0x1c0
[ 1338.433765][T24982]  ? __x64_sys_sendmsg+0x80/0x80
[ 1338.438807][T24982]  ? lockdep_hardirqs_on+0x94/0x140
[ 1338.444084][T24982]  do_syscall_64+0x4c/0xa0
[ 1338.448588][T24982]  ? clear_bhb_loop+0x60/0xb0
[ 1338.453329][T24982]  ? clear_bhb_loop+0x60/0xb0
[ 1338.458238][T24982]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1338.464190][T24982] RIP: 0033:0x7f0a4979aeb9
[ 1338.468664][T24982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1338.488345][T24982] RSP: 002b:00007f0a4a643028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1338.496822][T24982] RAX: ffffffffffffffda RBX: 00007f0a49a15fa0 RCX: 00007f0a4979aeb9
[ 1338.504849][T24982] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[ 1338.512865][T24982] RBP: 00007f0a4a643090 R08: 0000000000000000 R09: 0000000000000000
[ 1338.520982][T24982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1338.529015][T24982] R13: 00007f0a49a16038 R14: 00007f0a49a15fa0 R15: 00007ffc81829108
[ 1338.537072][T24982]  </TASK>
[ 1339.006938][T24989] netlink: 'syz.3.6024': attribute type 10 has an invalid length.
[ 1339.218633][T24989] team0: Port device wlan1 added
[ 1340.097720][T25004] FAULT_INJECTION: forcing a failure.
[ 1340.097720][T25004] name failslab, interval 1, probability 0, space 0, times 0
[ 1340.123726][T25004] CPU: 0 PID: 25004 Comm: syz.1.6027 Not tainted syzkaller #0
[ 1340.131295][T25004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1340.141402][T25004] Call Trace:
[ 1340.144732][T25004]  <TASK>
[ 1340.147707][T25004]  dump_stack_lvl+0x188/0x24e
[ 1340.152460][T25004]  ? show_regs_print_info+0x12/0x12
[ 1340.157761][T25004]  ? load_image+0x400/0x400
[ 1340.162327][T25004]  ? __might_sleep+0xd0/0xd0
[ 1340.166977][T25004]  ? __lock_acquire+0x7d10/0x7d10
[ 1340.172077][T25004]  should_fail_ex+0x399/0x4d0
[ 1340.176827][T25004]  should_failslab+0x5/0x20
[ 1340.181400][T25004]  slab_pre_alloc_hook+0x59/0x310
[ 1340.186504][T25004]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[ 1340.192308][T25004]  __kmem_cache_alloc_node+0x4f/0x260
[ 1340.197746][T25004]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[ 1340.203539][T25004]  __kmalloc+0xa0/0x240
[ 1340.207775][T25004]  tomoyo_realpath_from_path+0xdf/0x5d0
[ 1340.213408][T25004]  ? tomoyo_path_number_perm+0x205/0x650
[ 1340.219106][T25004]  tomoyo_path_number_perm+0x22f/0x650
[ 1340.224634][T25004]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1340.230153][T25004]  ? ksys_write+0x1c0/0x250
[ 1340.234746][T25004]  ? common_file_perm+0x171/0x1c0
[ 1340.239879][T25004]  ? __fget_files+0x28/0x4b0
[ 1340.244535][T25004]  ? __fget_files+0x28/0x4b0
[ 1340.249204][T25004]  security_file_ioctl+0x6c/0xa0
[ 1340.254213][T25004]  __se_sys_ioctl+0x48/0x170
[ 1340.258874][T25004]  do_syscall_64+0x4c/0xa0
[ 1340.263346][T25004]  ? clear_bhb_loop+0x60/0xb0
[ 1340.268077][T25004]  ? clear_bhb_loop+0x60/0xb0
[ 1340.272814][T25004]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1340.278768][T25004] RIP: 0033:0x7f18a6b9aeb9
[ 1340.283239][T25004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1340.302919][T25004] RSP: 002b:00007f18a79a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1340.311399][T25004] RAX: ffffffffffffffda RBX: 00007f18a6e15fa0 RCX: 00007f18a6b9aeb9
[ 1340.319506][T25004] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004
[ 1340.327541][T25004] RBP: 00007f18a79a4090 R08: 0000000000000000 R09: 0000000000000000
[ 1340.335579][T25004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1340.343785][T25004] R13: 00007f18a6e16038 R14: 00007f18a6e15fa0 R15: 00007ffdfa927558
[ 1340.351837][T25004]  </TASK>
[ 1340.906174][T24999] delete_channel: no stack
[ 1340.929883][T25004] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1341.676630][T25025] device syzkaller0 entered promiscuous mode
[ 1343.501413][T25032] device sit0 entered promiscuous mode
[ 1346.859599][T25070] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.6045'.
[ 1347.524356][T25076] FAULT_INJECTION: forcing a failure.
[ 1347.524356][T25076] name failslab, interval 1, probability 0, space 0, times 0
[ 1347.537247][T25076] CPU: 1 PID: 25076 Comm: syz.3.6046 Not tainted syzkaller #0
[ 1347.544797][T25076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1347.554916][T25076] Call Trace:
[ 1347.558245][T25076]  <TASK>
[ 1347.561221][T25076]  dump_stack_lvl+0x188/0x24e
[ 1347.566001][T25076]  ? show_regs_print_info+0x12/0x12
[ 1347.571271][T25076]  ? load_image+0x400/0x400
[ 1347.575826][T25076]  ? rcu_is_watching+0x11/0xa0
[ 1347.580664][T25076]  should_fail_ex+0x399/0x4d0
[ 1347.585428][T25076]  should_failslab+0x5/0x20
[ 1347.589999][T25076]  slab_pre_alloc_hook+0x59/0x310
[ 1347.595083][T25076]  ? find_exception+0x171/0xa30
[ 1347.600048][T25076]  kmem_cache_alloc+0x56/0x2f0
[ 1347.604877][T25076]  ? dst_alloc+0x101/0x160
[ 1347.609346][T25076]  dst_alloc+0x101/0x160
[ 1347.613648][T25076]  ip_route_output_key_hash_rcu+0x14a4/0x23f0
[ 1347.619929][T25076]  ? ip_route_output_key_hash+0x139/0x330
[ 1347.625736][T25076]  ip_route_output_key_hash+0x1ef/0x330
[ 1347.631351][T25076]  ? ip_route_input_rcu+0x3160/0x3160
[ 1347.636779][T25076]  ? stack_trace_save+0xa6/0xf0
[ 1347.641882][T25076]  ? __stack_depot_save+0x421/0x460
[ 1347.647174][T25076]  ip_route_output_flow+0x26/0x150
[ 1347.652486][T25076]  geneve_get_v4_rt+0x7f0/0xcc0
[ 1347.657618][T25076]  ? jhash+0x430/0x430
[ 1347.661752][T25076]  ? skb_tunnel_info+0x320/0x320
[ 1347.666776][T25076]  geneve_xmit+0x66d/0x3380
[ 1347.671369][T25076]  ? geneve_xmit+0x156/0x3380
[ 1347.676100][T25076]  ? slab_free_freelist_hook+0x131/0x1a0
[ 1347.681787][T25076]  ? geneve_stop+0x1b0/0x1b0
[ 1347.686431][T25076]  ? packet_rcv_fanout+0xdf/0x670
[ 1347.691540][T25076]  ? dev_queue_xmit_nit+0x29/0xbb0
[ 1347.696710][T25076]  ? __lock_acquire+0x7d10/0x7d10
[ 1347.701971][T25076]  ? dev_queue_xmit_nit+0x29/0xbb0
[ 1347.707143][T25076]  dev_hard_start_xmit+0x262/0x870
[ 1347.712334][T25076]  __dev_queue_xmit+0x1a7f/0x37f0
[ 1347.717510][T25076]  ? __dev_queue_xmit+0x26b/0x37f0
[ 1347.722678][T25076]  ? netdev_core_pick_tx+0x340/0x340
[ 1347.728022][T25076]  ? packet_parse_headers+0x7b8/0xab0
[ 1347.733466][T25076]  ? packet_parse_headers+0x84b/0xab0
[ 1347.738906][T25076]  ? sock_kzfree_s+0x50/0x50
[ 1347.743572][T25076]  ? skb_setup_tx_timestamp+0x1f0/0x1f0
[ 1347.749198][T25076]  ? __sock_cmsg_send+0x258/0x450
[ 1347.754311][T25076]  ? eth_header+0x117/0x200
[ 1347.758907][T25076]  ? skb_copy_datagram_from_iter+0x5e7/0x690
[ 1347.764958][T25076]  packet_sendmsg+0x3bc3/0x4e60
[ 1347.769904][T25076]  ? __might_sleep+0xd0/0xd0
[ 1347.774576][T25076]  ? aa_sk_perm+0x81f/0x950
[ 1347.779140][T25076]  ? __might_fault+0xa6/0x120
[ 1347.783886][T25076]  ? packet_getsockopt+0x9a0/0x9a0
[ 1347.789090][T25076]  ? __might_fault+0xa6/0x120
[ 1347.793835][T25076]  ? aa_sock_msg_perm+0x94/0x150
[ 1347.798836][T25076]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1347.804175][T25076]  ? security_socket_sendmsg+0x7c/0xa0
[ 1347.809705][T25076]  ? packet_getsockopt+0x9a0/0x9a0
[ 1347.814979][T25076]  ____sys_sendmsg+0x5be/0x970
[ 1347.819817][T25076]  ? __sys_sendmsg_sock+0x30/0x30
[ 1347.824914][T25076]  ? __import_iovec+0x315/0x500
[ 1347.829821][T25076]  ? import_iovec+0x6f/0xa0
[ 1347.834376][T25076]  ___sys_sendmsg+0x2a2/0x360
[ 1347.839128][T25076]  ? __sys_sendmsg+0x290/0x290
[ 1347.843969][T25076]  ? __lock_acquire+0x7d10/0x7d10
[ 1347.849340][T25076]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1347.854254][T25076]  ? ct_nmi_exit+0x145/0x1c0
[ 1347.858905][T25076]  ? __x64_sys_sendmsg+0x80/0x80
[ 1347.863922][T25076]  ? lockdep_hardirqs_on+0x94/0x140
[ 1347.869186][T25076]  do_syscall_64+0x4c/0xa0
[ 1347.873659][T25076]  ? clear_bhb_loop+0x60/0xb0
[ 1347.878393][T25076]  ? clear_bhb_loop+0x60/0xb0
[ 1347.883136][T25076]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1347.889098][T25076] RIP: 0033:0x7f407eb9aeb9
[ 1347.893580][T25076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1347.913263][T25076] RSP: 002b:00007f407fa2b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1347.921746][T25076] RAX: ffffffffffffffda RBX: 00007f407ee15fa0 RCX: 00007f407eb9aeb9
[ 1347.929866][T25076] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1347.937904][T25076] RBP: 00007f407fa2b090 R08: 0000000000000000 R09: 0000000000000000
[ 1347.945928][T25076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1347.953951][T25076] R13: 00007f407ee16038 R14: 00007f407ee15fa0 R15: 00007ffefe004458
[ 1347.961996][T25076]  </TASK>
[ 1348.521950][T25085] netlink: 'syz.2.6049': attribute type 1 has an invalid length.
[ 1348.559911][T25085] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.6049'.
[ 1348.594000][T25084] device syzkaller0 entered promiscuous mode
[ 1349.225397][T25092] netlink: 'syz.2.6051': attribute type 10 has an invalid length.
[ 1349.318446][T25092] team0: Port device wlan1 added
[ 1349.515439][T25096] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6052'.
[ 1349.593179][T25099] netlink: 'syz.5.6052': attribute type 10 has an invalid length.
[ 1349.663748][T25099] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6052'.
[ 1349.734424][T25101] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6054'.
[ 1349.751827][T25104] netlink: 'syz.3.6054': attribute type 10 has an invalid length.
[ 1349.797491][T25104] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6054'.
[ 1350.789637][T25114] delete_channel: no stack
[ 1352.719674][T25120] netlink: 'syz.3.6061': attribute type 1 has an invalid length.
[ 1352.748760][T25120] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.6061'.
[ 1352.919635][T25128] device syzkaller0 entered promiscuous mode
[ 1353.549036][T25144] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6069'.
[ 1353.679960][T25148] netlink: 'syz.4.6070': attribute type 21 has an invalid length.
[ 1353.703826][T25148] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.6070'.
[ 1354.300831][T25153] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6071'.
[ 1355.950062][T25164] delete_channel: no stack
[ 1357.115170][ T4274] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1357.126319][ T4274] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1357.134943][ T4274] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1357.143944][ T4274] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1357.152237][ T4274] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1357.160570][ T4274] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1357.857127][T25173] chnl_net:caif_netlink_parms(): no params data found
[ 1358.457127][T25173] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1358.466447][T25173] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1358.475410][T25173] device bridge_slave_0 entered promiscuous mode
[ 1358.485200][ T4274] Bluetooth: hci1: unexpected event 0x30 length: 151 > 3
[ 1358.485487][T25173] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1358.500432][T25173] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1358.509447][T25173] device bridge_slave_1 entered promiscuous mode
[ 1358.781562][T15365] bond0: (slave syz_tun): Releasing backup interface
[ 1358.826885][T25189] netlink: 'syz.2.6079': attribute type 1 has an invalid length.
[ 1358.842548][T25189] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.6079'.
[ 1358.873294][T25173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1358.925636][T25173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1359.083181][T25173] team0: Port device team_slave_0 added
[ 1359.099674][T25200] netlink: 'syz.3.6083': attribute type 7 has an invalid length.
[ 1359.132237][T25173] team0: Port device team_slave_1 added
[ 1359.140273][ T4358] tipc: Subscription rejected, illegal request
[ 1359.214051][ T4274] Bluetooth: hci3: command 0x0409 tx timeout
[ 1359.269414][T25173] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1359.278347][T25173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1359.304789][T25173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1359.318369][T25173] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1359.325715][T25173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1359.385722][T25173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1361.293811][ T4274] Bluetooth: hci3: command 0x041b tx timeout
[ 1361.796469][T25173] device hsr_slave_0 entered promiscuous mode
[ 1361.834153][T25173] device hsr_slave_1 entered promiscuous mode
[ 1361.885681][T25173] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1361.905756][T25173] Cannot create hsr debugfs directory
[ 1362.017509][ T4364] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1362.147067][T25212] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.6086'.
[ 1362.183296][T25212] netlink: zone id is out of range
[ 1362.197442][T25212] netlink: get zone limit has 8 unknown bytes
[ 1362.606377][ T4364] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1362.719928][T25211] delete_channel: no stack
[ 1362.782393][ T4364] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1362.900048][ T4364] bridge0: port 4(netdevsim0) entered disabled state
[ 1363.285323][ T4364] device netdevsim0 left promiscuous mode
[ 1363.295183][ T4364] bridge0: port 4(netdevsim0) entered disabled state
[ 1363.307944][ T4364] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1363.374221][ T4274] Bluetooth: hci3: command 0x040f tx timeout
[ 1363.637370][T25228] netlink: 'syz.3.6091': attribute type 17 has an invalid length.
[ 1363.690566][T25243] netlink: 'syz.4.6095': attribute type 1 has an invalid length.
[ 1363.722528][T25243] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.6095'.
[ 1365.009551][T25271] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.6102'.
[ 1365.047384][T25271] netlink: zone id is out of range
[ 1365.096232][T25271] netlink: get zone limit has 8 unknown bytes
[ 1365.441856][T25280] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6103'.
[ 1365.463773][ T4274] Bluetooth: hci3: command 0x0419 tx timeout
[ 1365.757178][T25269] delete_channel: no stack
[ 1365.983162][T25282] netlink: 'syz.4.6103': attribute type 10 has an invalid length.
[ 1366.647816][T25299] netlink: 'syz.4.6106': attribute type 7 has an invalid length.
[ 1366.683910][T25302] netlink: 'syz.2.6108': attribute type 1 has an invalid length.
[ 1366.701836][T25302] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.6108'.
[ 1366.892097][T25173] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1366.904352][T25173] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1367.071933][ T4274] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4
[ 1367.080595][T25173] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1367.204572][T25173] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1368.451402][ T4364] device hsr_slave_0 left promiscuous mode
[ 1368.474903][ T4364] device hsr_slave_1 left promiscuous mode
[ 1368.549135][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1368.576535][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 1368.582961][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 1368.589794][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1368.652484][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1368.684218][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1368.695048][ T4364] bridge0: port 3(dummy0) entered disabled state
[ 1368.756246][ T4364] device bridge_slave_1 left promiscuous mode
[ 1368.762642][ T4364] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1368.824162][ T4364] device bridge_slave_0 left promiscuous mode
[ 1368.830647][ T4364] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1369.002709][ T4364] device veth1_macvtap left promiscuous mode
[ 1369.043634][ T4364] device veth0_macvtap left promiscuous mode
[ 1369.062430][ T4364] device veth1_vlan left promiscuous mode
[ 1369.116839][ T4364] device veth0_vlan left promiscuous mode
[ 1369.133529][T21770] Bluetooth: hci1: command 0x0406 tx timeout
[ 1370.862742][T25380] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.6128'.
[ 1370.879551][T25380] netlink: zone id is out of range
[ 1370.914839][T25380] netlink: get zone limit has 8 unknown bytes
[ 1371.690752][T25376] delete_channel: no stack
[ 1371.967176][ T4364] team0 (unregistering): Port device team_slave_1 removed
[ 1372.020409][ T4364] team0 (unregistering): Port device team_slave_0 removed
[ 1372.074539][ T4364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1372.083702][ T4364] device bond_slave_1 left promiscuous mode
[ 1372.134029][ T4364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1372.143281][ T4364] device bond_slave_0 left promiscuous mode
[ 1372.430816][ T4364] bond0 (unregistering): (slave batadv0): Releasing backup interface
[ 1372.439817][ T4364] device batadv0 left promiscuous mode
[ 1372.550803][ T4364] bond0 (unregistering): Released all slaves
[ 1372.678524][T25365] netlink: 'syz.2.6125': attribute type 1 has an invalid length.
[ 1372.688699][T25365] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.6125'.
[ 1372.767461][T25173] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1372.822705][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1372.852289][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1372.895930][T25173] 8021q: adding VLAN 0 to HW filter on device team0
[ 1372.973775][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1373.011401][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1373.053500][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1373.060858][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1373.062835][T25384] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6129'.
[ 1373.089048][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1373.100968][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1373.117983][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1373.125286][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1373.233326][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1373.273196][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1373.355111][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1373.416049][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1373.520749][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1373.594888][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1373.692924][T25393] netlink: 'syz.2.6129': attribute type 10 has an invalid length.
[ 1374.109741][T25393] team0: Port device geneve1 added
[ 1374.188974][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1374.222914][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1374.289277][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1374.325656][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1374.375120][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1374.395958][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1374.456351][T25173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1374.705623][T25408] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.6135'.
[ 1374.743602][T25408] netlink: zone id is out of range
[ 1374.749072][T25408] netlink: get zone limit has 8 unknown bytes
[ 1374.848939][T25414] netlink: 'syz.1.6139': attribute type 1 has an invalid length.
[ 1374.900124][T25414] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.6139'.
[ 1375.473310][T25421] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.6141'.
[ 1375.556043][T25421] netlink: zone id is out of range
[ 1375.645058][T25421] netlink: get zone limit has 8 unknown bytes
[ 1376.419322][T25420] delete_channel: no stack
[ 1376.697581][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1376.734233][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1376.802845][T25173] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1377.135530][T25431] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.6143'.
[ 1377.207514][T25431] debugfs: Directory '.!
' with parent 'ieee80211' already present!
[ 1377.781280][T25445] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6146'.
[ 1378.098358][T25448] netlink: 'syz.1.6146': attribute type 10 has an invalid length.
[ 1378.645407][T25448] team0: Port device geneve1 added
[ 1379.037268][T25459] netlink: 'syz.4.6151': attribute type 1 has an invalid length.
[ 1379.069076][T25459] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.6151'.
[ 1379.202495][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1379.234596][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1379.314851][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1379.344467][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1379.387216][T25173] device veth0_vlan entered promiscuous mode
[ 1379.407072][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1379.450885][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1379.594846][T25173] device veth1_vlan entered promiscuous mode
[ 1379.627314][T25465] syz.2.6152[25465] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1379.627940][T25465] syz.2.6152[25465] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1379.694074][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1379.814819][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1379.864700][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1379.900451][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1379.934707][T25173] device veth0_macvtap entered promiscuous mode
[ 1379.989703][T25173] device veth1_macvtap entered promiscuous mode
[ 1380.092980][T25173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1380.164682][T25173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1380.225186][T25173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1380.287263][T25173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1380.339980][T25173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1380.388224][T25173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1380.429518][T25173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1380.479054][T25173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1380.584642][T25173] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1380.661510][T25173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1380.751089][T25173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1380.824600][T25173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1380.858905][T25173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1380.888163][T25173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1380.981870][T25173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1381.011080][T25173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1381.039455][T25173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1381.127863][T25173] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1381.189441][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1381.226111][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1381.267318][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1381.299016][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1381.332447][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1381.361851][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1381.488774][T25173] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1381.546464][T25173] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1381.609840][T25173] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1381.673642][T25173] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1382.145328][ T4364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1382.162938][ T4364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1382.234167][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1382.262662][T25503] netlink: 'syz.1.6164': attribute type 1 has an invalid length.
[ 1382.275377][T25503] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.6164'.
[ 1382.311127][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1382.333936][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1382.394305][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1383.018696][T25517] netlink: 'syz.2.6168': attribute type 21 has an invalid length.
[ 1383.026742][T25517] netlink: 'syz.2.6168': attribute type 13 has an invalid length.
[ 1383.137608][T25512] syz.1.6167[25512] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1383.141961][T25517] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6168'.
[ 1383.156888][T25512] syz.1.6167[25512] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1383.248033][T25520] device sit0 entered promiscuous mode
[ 1384.344785][T25535] FAULT_INJECTION: forcing a failure.
[ 1384.344785][T25535] name failslab, interval 1, probability 0, space 0, times 0
[ 1384.390207][T25535] CPU: 1 PID: 25535 Comm: syz.5.6175 Not tainted syzkaller #0
[ 1384.397795][T25535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1384.407922][T25535] Call Trace:
[ 1384.411258][T25535]  <TASK>
[ 1384.414233][T25535]  dump_stack_lvl+0x188/0x24e
[ 1384.418980][T25535]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1384.425201][T25535]  ? show_regs_print_info+0x12/0x12
[ 1384.430467][T25535]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1384.436722][T25535]  should_fail_ex+0x399/0x4d0
[ 1384.441568][T25535]  should_failslab+0x5/0x20
[ 1384.446134][T25535]  slab_pre_alloc_hook+0x59/0x310
[ 1384.451230][T25535]  kmem_cache_alloc+0x56/0x2f0
[ 1384.456046][T25535]  ? skb_clone+0x1e7/0x370
[ 1384.460535][T25535]  skb_clone+0x1e7/0x370
[ 1384.464855][T25535]  bpf_clone_redirect+0xa9/0x3c0
[ 1384.469868][T25535]  bpf_prog_30a03299039a39c6+0x19/0x1d
[ 1384.475386][T25535]  bpf_test_run+0x4c1/0x830
[ 1384.479974][T25535]  ? convert___skb_to_skb+0x580/0x580
[ 1384.485472][T25535]  ? eth_get_headlen+0x200/0x200
[ 1384.490504][T25535]  ? __build_skb+0x257/0x3c0
[ 1384.495186][T25535]  ? convert___skb_to_skb+0x3d/0x580
[ 1384.500539][T25535]  bpf_prog_test_run_skb+0xaa6/0x12a0
[ 1384.505997][T25535]  ? cpu_online+0xa0/0xa0
[ 1384.510394][T25535]  bpf_prog_test_run+0x31e/0x390
[ 1384.515415][T25535]  __sys_bpf+0x62b/0x780
[ 1384.519755][T25535]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1384.525211][T25535]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1384.531448][T25535]  __x64_sys_bpf+0x78/0x90
[ 1384.535939][T25535]  do_syscall_64+0x4c/0xa0
[ 1384.540417][T25535]  ? clear_bhb_loop+0x60/0xb0
[ 1384.545158][T25535]  ? clear_bhb_loop+0x60/0xb0
[ 1384.549942][T25535]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1384.555895][T25535] RIP: 0033:0x7fc3d1b9aeb9
[ 1384.560364][T25535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1384.580039][T25535] RSP: 002b:00007fc3cfdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1384.588529][T25535] RAX: ffffffffffffffda RBX: 00007fc3d1e15fa0 RCX: 00007fc3d1b9aeb9
[ 1384.596569][T25535] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[ 1384.604596][T25535] RBP: 00007fc3cfdf6090 R08: 0000000000000000 R09: 0000000000000000
[ 1384.612620][T25535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1384.620655][T25535] R13: 00007fc3d1e16038 R14: 00007fc3d1e15fa0 R15: 00007ffdfd304cd8
[ 1384.628712][T25535]  </TASK>
[ 1384.706391][ T4274] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1384.718301][ T4274] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1384.735522][ T4274] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1384.745784][T11482] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1384.754270][ T4274] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1384.763188][ T4274] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1386.102856][ T4274] Bluetooth: hci5: unexpected event 0x06 length: 15 > 3
[ 1386.813845][T21770] Bluetooth: hci0: command 0x0409 tx timeout
[ 1387.147054][T25537] netlink: 'syz.1.6176': attribute type 1 has an invalid length.
[ 1387.163084][T25537] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.6176'.
[ 1387.464412][T25553] FAULT_INJECTION: forcing a failure.
[ 1387.464412][T25553] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1387.497963][ T4364] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1387.543780][T25553] CPU: 1 PID: 25553 Comm: syz.1.6190 Not tainted syzkaller #0
[ 1387.551345][T25553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1387.561568][T25553] Call Trace:
[ 1387.564893][T25553]  <TASK>
[ 1387.567871][T25553]  dump_stack_lvl+0x188/0x24e
[ 1387.572618][T25553]  ? show_regs_print_info+0x12/0x12
[ 1387.577873][T25553]  ? load_image+0x400/0x400
[ 1387.582420][T25553]  ? __lock_acquire+0x7d10/0x7d10
[ 1387.587518][T25553]  ? __rcu_read_unlock+0x78/0xd0
[ 1387.592543][T25553]  should_fail_ex+0x399/0x4d0
[ 1387.597307][T25553]  _copy_to_user+0x2c/0x130
[ 1387.601889][T25553]  bpf_test_finish+0x198/0x600
[ 1387.606731][T25553]  ? convert___skb_to_skb+0x580/0x580
[ 1387.612250][T25553]  ? convert_skb_to___skb+0x420/0x420
[ 1387.617677][T25553]  ? __build_skb+0x257/0x3c0
[ 1387.622374][T25553]  bpf_prog_test_run_skb+0xc99/0x12a0
[ 1387.627834][T25553]  ? cpu_online+0xa0/0xa0
[ 1387.632235][T25553]  bpf_prog_test_run+0x31e/0x390
[ 1387.637309][T25553]  __sys_bpf+0x62b/0x780
[ 1387.641720][T25553]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1387.647172][T25553]  ? lock_chain_count+0x20/0x20
[ 1387.652112][T25553]  __x64_sys_bpf+0x78/0x90
[ 1387.656599][T25553]  do_syscall_64+0x4c/0xa0
[ 1387.661170][T25553]  ? clear_bhb_loop+0x60/0xb0
[ 1387.665913][T25553]  ? clear_bhb_loop+0x60/0xb0
[ 1387.670642][T25553]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1387.676664][T25553] RIP: 0033:0x7f18a6b9aeb9
[ 1387.681194][T25553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1387.700864][T25553] RSP: 002b:00007f18a79a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1387.709321][T25553] RAX: ffffffffffffffda RBX: 00007f18a6e15fa0 RCX: 00007f18a6b9aeb9
[ 1387.717334][T25553] RDX: 0000000000000050 RSI: 0000200000000c40 RDI: 000000000000000a
[ 1387.725375][T25553] RBP: 00007f18a79a4090 R08: 0000000000000000 R09: 0000000000000000
[ 1387.733378][T25553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1387.741460][T25553] R13: 00007f18a6e16038 R14: 00007f18a6e15fa0 R15: 00007ffdfa927558
[ 1387.749491][T25553]  </TASK>
[ 1387.789133][ T4364] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1387.827978][T25551] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6181'.
[ 1387.965500][ T4364] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1388.027687][T25551] netlink: 'syz.2.6181': attribute type 10 has an invalid length.
[ 1388.044030][T25551] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6181'.
[ 1388.121700][ T4364] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1388.231808][T25559] syz.5.6182[25559] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1388.236688][T25559] syz.5.6182[25559] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1388.750750][T25543] chnl_net:caif_netlink_parms(): no params data found
[ 1388.893608][T21770] Bluetooth: hci0: command 0x041b tx timeout
[ 1389.218543][T25590] netlink: 'syz.1.6191': attribute type 1 has an invalid length.
[ 1389.237398][T25590] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.6191'.
[ 1389.540997][T25589] netlink: 'syz.2.6189': attribute type 10 has an invalid length.
[ 1389.633267][T25589] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1389.680707][T25589] device bridge_slave_1 left promiscuous mode
[ 1389.714961][T25589] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1389.996846][T25543] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1390.026782][T25543] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1390.077559][T25543] device bridge_slave_0 entered promiscuous mode
[ 1390.440904][T25543] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1390.469457][T25543] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1390.494902][T25543] device bridge_slave_1 entered promiscuous mode
[ 1390.527446][T25612] netlink: 'syz.2.6195': attribute type 8 has an invalid length.
[ 1390.544121][T25612] netlink: 'syz.2.6195': attribute type 9 has an invalid length.
[ 1390.561772][T25612] netlink: 'syz.2.6195': attribute type 10 has an invalid length.
[ 1390.578474][T25612] netlink: 'syz.2.6195': attribute type 11 has an invalid length.
[ 1390.596921][T25612] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6195'.
[ 1390.820910][T25543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1390.847416][T25543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1390.975915][T21770] Bluetooth: hci0: command 0x040f tx timeout
[ 1391.031342][T25632] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6197'.
[ 1391.177715][T25628] netlink: 'syz.5.6197': attribute type 10 has an invalid length.
[ 1391.205234][T25628] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6197'.
[ 1391.245944][T25628] device dummy0 entered promiscuous mode
[ 1391.267616][T25628] bridge0: port 3(dummy0) entered blocking state
[ 1391.324885][T25628] bridge0: port 3(dummy0) entered disabled state
[ 1391.345287][T25628] bridge0: port 3(dummy0) entered blocking state
[ 1391.352351][T25628] bridge0: port 3(dummy0) entered forwarding state
[ 1391.637984][T25543] team0: Port device team_slave_0 added
[ 1391.669155][T25543] team0: Port device team_slave_1 added
[ 1391.779728][T25543] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1391.831350][T25543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1391.983767][T25543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1392.122364][T25543] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1392.144119][T25543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1392.264196][T25543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1392.290736][T25655] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.6204'.
[ 1392.315385][T25655] netlink: zone id is out of range
[ 1392.320654][T25655] netlink: zone id is out of range
[ 1392.335052][T25655] netlink: zone id is out of range
[ 1392.340318][T25655] netlink: zone id is out of range
[ 1392.372100][T25655] netlink: zone id is out of range
[ 1392.390983][T25655] netlink: zone id is out of range
[ 1392.410851][T25655] netlink: get zone limit has 8 unknown bytes
[ 1392.755768][T25666] FAULT_INJECTION: forcing a failure.
[ 1392.755768][T25666] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1392.793633][T25666] CPU: 1 PID: 25666 Comm: syz.5.6208 Not tainted syzkaller #0
[ 1392.801221][T25666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1392.811330][T25666] Call Trace:
[ 1392.814670][T25666]  <TASK>
[ 1392.817641][T25666]  dump_stack_lvl+0x188/0x24e
[ 1392.822367][T25666]  ? show_regs_print_info+0x12/0x12
[ 1392.827717][T25666]  ? load_image+0x400/0x400
[ 1392.832269][T25666]  ? __lock_acquire+0x7d10/0x7d10
[ 1392.837342][T25666]  should_fail_ex+0x399/0x4d0
[ 1392.842069][T25666]  _copy_to_user+0x2c/0x130
[ 1392.846605][T25666]  bpf_verifier_vlog+0x172/0x390
[ 1392.851609][T25666]  btf_verifier_log+0x1f2/0x2b0
[ 1392.856505][T25666]  ? btf_find_kptr+0xb10/0xb10
[ 1392.861307][T25666]  ? btf_func_proto_log+0x611/0x840
[ 1392.866550][T25666]  __btf_verifier_log_type+0x55c/0x7d0
[ 1392.872059][T25666]  ? btf_int_show+0x2890/0x2890
[ 1392.876953][T25666]  ? kvmalloc_node+0x6c/0x180
[ 1392.881679][T25666]  ? rcu_is_watching+0x11/0xa0
[ 1392.886483][T25666]  ? kvmalloc_node+0x6c/0x180
[ 1392.891201][T25666]  ? __kmalloc_node+0xe1/0x240
[ 1392.896013][T25666]  btf_func_proto_check_meta+0xe9/0x150
[ 1392.901604][T25666]  btf_check_all_metas+0x35e/0xa50
[ 1392.906789][T25666]  btf_parse_type_sec+0xf8/0x18d0
[ 1392.911881][T25666]  ? btf_check_sec_info+0x350/0x350
[ 1392.917124][T25666]  ? btf_check_sec_info+0x29b/0x350
[ 1392.922386][T25666]  ? btf_verifier_log+0x2b0/0x2b0
[ 1392.927556][T25666]  ? btf_parse_hdr+0x5eb/0x7e0
[ 1392.932354][T25666]  ? btf_parse_str_sec+0x20a/0x2a0
[ 1392.937589][T25666]  btf_new_fd+0x46a/0x780
[ 1392.941956][T25666]  __sys_bpf+0x612/0x780
[ 1392.946232][T25666]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1392.951681][T25666]  ? lock_chain_count+0x20/0x20
[ 1392.956594][T25666]  __x64_sys_bpf+0x78/0x90
[ 1392.961066][T25666]  do_syscall_64+0x4c/0xa0
[ 1392.965523][T25666]  ? clear_bhb_loop+0x60/0xb0
[ 1392.970240][T25666]  ? clear_bhb_loop+0x60/0xb0
[ 1392.974952][T25666]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1392.980916][T25666] RIP: 0033:0x7fc3d1b9aeb9
[ 1392.985366][T25666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1393.005001][T25666] RSP: 002b:00007fc3cfdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1393.013448][T25666] RAX: ffffffffffffffda RBX: 00007fc3d1e15fa0 RCX: 00007fc3d1b9aeb9
[ 1393.021467][T25666] RDX: 0000000000000028 RSI: 0000200000000640 RDI: 0000000000000012
[ 1393.029486][T25666] RBP: 00007fc3cfdf6090 R08: 0000000000000000 R09: 0000000000000000
[ 1393.037497][T25666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1393.045498][T25666] R13: 00007fc3d1e16038 R14: 00007fc3d1e15fa0 R15: 00007ffdfd304cd8
[ 1393.053539][T25666]  </TASK>
[ 1393.060291][T21770] Bluetooth: hci0: command 0x0419 tx timeout
[ 1393.157077][ T4364] team0: Port device wlan1 removed
[ 1393.177886][T25543] device hsr_slave_0 entered promiscuous mode
[ 1393.192884][T25543] device hsr_slave_1 entered promiscuous mode
[ 1393.586745][T25680] device bond0 entered promiscuous mode
[ 1393.592814][T25680] device bond_slave_0 entered promiscuous mode
[ 1393.607419][T25680] device bond_slave_1 entered promiscuous mode
[ 1393.654030][T25683] netlink: 'syz.2.6213': attribute type 1 has an invalid length.
[ 1393.670032][T25683] netlink: 16134 bytes leftover after parsing attributes in process `syz.2.6213'.
[ 1393.714107][T25679] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6212'.
[ 1393.751206][T25685] netlink: 'syz.1.6212': attribute type 10 has an invalid length.
[ 1393.773822][T25685] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6212'.
[ 1393.871588][ T4364] device hsr_slave_0 left promiscuous mode
[ 1393.923780][ T4364] device hsr_slave_1 left promiscuous mode
[ 1393.944025][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1393.989976][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1394.026921][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1394.040196][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1394.172184][ T4364] batman_adv: batadv0: Interface deactivated: hsr_slave_1
[ 1394.200331][ T4364] batman_adv: batadv0: Removing interface: hsr_slave_1
[ 1394.376925][ T4364] bridge0: port 3(dummy0) entered disabled state
[ 1394.411791][ T4364] device bridge_slave_1 left promiscuous mode
[ 1394.450581][ T4364] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1394.510223][ T4364] device bridge_slave_0 left promiscuous mode
[ 1394.526914][ T4364] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1394.688809][ T4364] device veth1_vlan left promiscuous mode
[ 1394.714175][ T4364] device veth0_vlan left promiscuous mode
[ 1394.792865][T25717] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6219'.
[ 1395.983501][ T4364] team0 (unregistering): Port device team_slave_1 removed
[ 1396.038803][ T4364] team0 (unregistering): Port device team_slave_0 removed
[ 1396.625334][T25710] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6218'.
[ 1397.392212][T25735] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6224'.
[ 1397.753192][T25738] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6225'.
[ 1398.115108][T25543] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1398.237106][T25543] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1398.267725][T25543] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1398.321252][T25543] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1398.680987][T25768] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6231'.
[ 1398.789550][T25768] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6231'.
[ 1398.977550][T25543] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1399.039193][T25770] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6231'.
[ 1399.092269][T25543] 8021q: adding VLAN 0 to HW filter on device team0
[ 1399.138086][T25773] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6231'.
[ 1399.181667][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1399.199359][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1399.263163][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1399.332912][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1399.344237][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1399.351411][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1399.380053][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1399.424568][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1399.455614][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1399.462821][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1399.530674][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1399.565236][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1399.613322][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1399.643892][T25789] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6236'.
[ 1399.674360][T25787] netlink: 'syz.4.6236': attribute type 10 has an invalid length.
[ 1399.699892][T25787] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6236'.
[ 1399.749330][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1399.763305][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1399.792398][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1399.814493][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1399.825052][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1399.846565][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1399.869813][T25543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1399.888478][T25543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1399.901648][T25795] netlink: 1 bytes leftover after parsing attributes in process `syz.5.6237'.
[ 1399.950870][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1399.967647][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1399.989427][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1400.625912][T25815] netlink: 'syz.4.6242': attribute type 10 has an invalid length.
[ 1400.644175][T25815] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6242'.
[ 1400.681821][T25815] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6242'.
[ 1401.151749][T25815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1401.192737][T25815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1401.255111][T25815] bond0 (unregistering): Released all slaves
[ 1401.374507][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1401.382192][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1401.452534][T25543] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1401.608528][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1401.628531][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1404.359388][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1404.375669][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1404.391748][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1404.402554][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1404.458574][T25543] device veth0_vlan entered promiscuous mode
[ 1404.487587][T25543] device veth1_vlan entered promiscuous mode
[ 1404.645367][T25869] netlink: 'syz.4.6249': attribute type 1 has an invalid length.
[ 1404.653237][T25869] netlink: 16134 bytes leftover after parsing attributes in process `syz.4.6249'.
[ 1404.716521][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1404.750338][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1404.765030][T25543] device veth0_macvtap entered promiscuous mode
[ 1404.789595][T25543] device veth1_macvtap entered promiscuous mode
[ 1404.875989][T25543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1404.910032][T25543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1404.941015][T25543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1404.963314][T25543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1404.988912][T25543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1405.012364][T25543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1405.048660][T25543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1405.099812][T25543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1405.193238][T25543] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1405.296335][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1405.335228][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1405.396833][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1405.488553][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1405.518880][T25543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1405.544649][T25543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1405.574057][T25543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1405.595049][T25543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1405.615344][T25543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1405.654286][T25543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1405.672330][T25543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1405.691455][T25543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1405.706714][T25543] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1405.722577][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1405.737998][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1405.785004][T25543] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1405.805325][T25543] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1405.844213][T25543] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1405.880453][T25543] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1406.117885][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1406.169043][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1406.206575][T25904] netlink: 830 bytes leftover after parsing attributes in process `syz.5.6257'.
[ 1406.258384][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1406.294514][T25908] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6258'.
[ 1406.342913][T25910] netlink: 'syz.4.6258': attribute type 10 has an invalid length.
[ 1406.399856][T25910] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6258'.
[ 1406.466490][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1406.504905][ T4274] Bluetooth: hci2: command 0x0406 tx timeout
[ 1406.523561][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1406.607096][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1407.096764][T25926] netlink: 'syz.4.6264': attribute type 1 has an invalid length.
[ 1407.308637][T25926] netlink: 16134 bytes leftover after parsing attributes in process `syz.4.6264'.
[ 1409.659727][T25976] FAULT_INJECTION: forcing a failure.
[ 1409.659727][T25976] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1409.700954][T25976] CPU: 0 PID: 25976 Comm: syz.3.6272 Not tainted syzkaller #0
[ 1409.708527][T25976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1409.718654][T25976] Call Trace:
[ 1409.721974][T25976]  <TASK>
[ 1409.724945][T25976]  dump_stack_lvl+0x188/0x24e
[ 1409.729688][T25976]  ? show_regs_print_info+0x12/0x12
[ 1409.734960][T25976]  ? load_image+0x400/0x400
[ 1409.739527][T25976]  ? __lock_acquire+0x7d10/0x7d10
[ 1409.744608][T25976]  ? __bpf_prog_test_run_raw_tp+0x2a6/0x430
[ 1409.750580][T25976]  should_fail_ex+0x399/0x4d0
[ 1409.755440][T25976]  _copy_to_user+0x2c/0x130
[ 1409.760006][T25976]  bpf_prog_test_run_raw_tp+0x4c6/0x660
[ 1409.765607][T25976]  ? trace_bpf_test_finish+0x220/0x220
[ 1409.771108][T25976]  ? trace_bpf_test_finish+0x220/0x220
[ 1409.776628][T25976]  bpf_prog_test_run+0x31e/0x390
[ 1409.781628][T25976]  __sys_bpf+0x62b/0x780
[ 1409.785932][T25976]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1409.791392][T25976]  ? lock_chain_count+0x20/0x20
[ 1409.796309][T25976]  __x64_sys_bpf+0x78/0x90
[ 1409.800801][T25976]  do_syscall_64+0x4c/0xa0
[ 1409.805299][T25976]  ? clear_bhb_loop+0x60/0xb0
[ 1409.810064][T25976]  ? clear_bhb_loop+0x60/0xb0
[ 1409.814818][T25976]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1409.820772][T25976] RIP: 0033:0x7f78fa19aeb9
[ 1409.825241][T25976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1409.844911][T25976] RSP: 002b:00007f78fb0a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1409.853477][T25976] RAX: ffffffffffffffda RBX: 00007f78fa415fa0 RCX: 00007f78fa19aeb9
[ 1409.861519][T25976] RDX: 0000000000000050 RSI: 0000200000000680 RDI: 000000000000000a
[ 1409.869559][T25976] RBP: 00007f78fb0a9090 R08: 0000000000000000 R09: 0000000000000000
[ 1409.877607][T25976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1409.885682][T25976] R13: 00007f78fa416038 R14: 00007f78fa415fa0 R15: 00007fff32fe0d98
[ 1409.893721][T25976]  </TASK>
[ 1409.948058][T25979] netlink: 'syz.4.6273': attribute type 2 has an invalid length.
[ 1409.976289][T25979] netlink: 'syz.4.6273': attribute type 8 has an invalid length.
[ 1409.992680][T25979] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6273'.
[ 1410.245465][T25986] netlink: 'syz.4.6277': attribute type 1 has an invalid length.
[ 1410.279945][T25986] netlink: 'syz.4.6277': attribute type 4 has an invalid length.
[ 1410.308489][T25986] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.6277'.
[ 1410.341642][T25990] netlink: 187664 bytes leftover after parsing attributes in process `syz.5.6276'.
[ 1412.857821][T26048] netlink: 'syz.3.6292': attribute type 1 has an invalid length.
[ 1412.884708][T26048] netlink: 'syz.3.6292': attribute type 4 has an invalid length.
[ 1412.916349][T26048] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.6292'.
[ 1413.057868][T26052] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.6293'.
[ 1413.076435][T26052] sysfs: cannot create duplicate filename '/class/ieee80211/.!
'
[ 1413.104687][T26052] CPU: 0 PID: 26052 Comm: syz.1.6293 Not tainted syzkaller #0
[ 1413.112258][T26052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1413.122391][T26052] Call Trace:
[ 1413.125724][T26052]  <TASK>
[ 1413.128702][T26052]  dump_stack_lvl+0x188/0x24e
[ 1413.133451][T26052]  ? show_regs_print_info+0x12/0x12
[ 1413.138711][T26052]  ? load_image+0x400/0x400
[ 1413.143319][T26052]  sysfs_warn_dup+0x8a/0xa0
[ 1413.147874][T26052]  sysfs_do_create_link_sd+0xc0/0x110
[ 1413.153288][T26052]  device_add+0x7ed/0xfb0
[ 1413.157675][T26052]  wiphy_register+0x1d9f/0x2ac0
[ 1413.162592][T26052]  ? cfg80211_event_work+0x40/0x40
[ 1413.167748][T26052]  ? minstrel_ht_alloc+0x894/0xa20
[ 1413.172901][T26052]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1413.179020][T26052]  ieee80211_register_hw+0x2d00/0x39f0
[ 1413.184550][T26052]  ? ieee80211_register_hw+0xea1/0x39f0
[ 1413.190144][T26052]  ? ieee80211_register_hw+0xea1/0x39f0
[ 1413.195732][T26052]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1413.201425][T26052]  ? memset+0x1e/0x40
[ 1413.205446][T26052]  ? __hrtimer_init+0x186/0x270
[ 1413.210334][T26052]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[ 1413.216200][T26052]  hwsim_new_radio_nl+0xafa/0xce0
[ 1413.221336][T26052]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1413.226979][T26052]  ? end_current_label_crit_section+0x170/0x170
[ 1413.233283][T26052]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1413.239228][T26052]  ? bpf_lsm_capable+0x5/0x10
[ 1413.243939][T26052]  ? security_capable+0x85/0xb0
[ 1413.248836][T26052]  genl_rcv_msg+0x604/0x790
[ 1413.253386][T26052]  ? genl_bind+0x360/0x360
[ 1413.257842][T26052]  ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0
[ 1413.264237][T26052]  netlink_rcv_skb+0x1fb/0x450
[ 1413.269091][T26052]  ? genl_bind+0x360/0x360
[ 1413.273559][T26052]  ? netlink_ack+0x1170/0x1170
[ 1413.278369][T26052]  ? down_read+0x1a8/0x2d0
[ 1413.282822][T26052]  genl_rcv+0x24/0x40
[ 1413.286847][T26052]  netlink_unicast+0x74d/0x8d0
[ 1413.291669][T26052]  netlink_sendmsg+0x8ad/0xbd0
[ 1413.296492][T26052]  ? netlink_getsockopt+0x550/0x550
[ 1413.301742][T26052]  ? aa_sock_msg_perm+0x94/0x150
[ 1413.306714][T26052]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1413.312033][T26052]  ? security_socket_sendmsg+0x7c/0xa0
[ 1413.317536][T26052]  ? netlink_getsockopt+0x550/0x550
[ 1413.322773][T26052]  ____sys_sendmsg+0x5be/0x970
[ 1413.327591][T26052]  ? __sys_sendmsg_sock+0x30/0x30
[ 1413.332648][T26052]  ? __import_iovec+0x315/0x500
[ 1413.337548][T26052]  ? import_iovec+0x6f/0xa0
[ 1413.342082][T26052]  ___sys_sendmsg+0x2a2/0x360
[ 1413.346800][T26052]  ? try_to_wake_up+0x67c/0x1080
[ 1413.351781][T26052]  ? __sys_sendmsg+0x290/0x290
[ 1413.356632][T26052]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1413.361610][T26052]  ? __x64_sys_sendmsg+0x80/0x80
[ 1413.366690][T26052]  ? lockdep_hardirqs_on+0x94/0x140
[ 1413.371934][T26052]  do_syscall_64+0x4c/0xa0
[ 1413.376394][T26052]  ? clear_bhb_loop+0x60/0xb0
[ 1413.381114][T26052]  ? clear_bhb_loop+0x60/0xb0
[ 1413.385828][T26052]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1413.391764][T26052] RIP: 0033:0x7f18a6b9aeb9
[ 1413.396211][T26052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1413.415860][T26052] RSP: 002b:00007f18a79a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1413.424315][T26052] RAX: ffffffffffffffda RBX: 00007f18a6e15fa0 RCX: 00007f18a6b9aeb9
[ 1413.432312][T26052] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[ 1413.440310][T26052] RBP: 00007f18a6c08c1f R08: 0000000000000000 R09: 0000000000000000
[ 1413.448425][T26052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1413.456443][T26052] R13: 00007f18a6e16038 R14: 00007f18a6e15fa0 R15: 00007ffdfa927558
[ 1413.464472][T26052]  </TASK>
[ 1414.124547][T26073] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1414.313114][T26073] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1415.709696][T26084] FAULT_INJECTION: forcing a failure.
[ 1415.709696][T26084] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1415.738128][T26084] CPU: 0 PID: 26084 Comm: syz.5.6304 Not tainted syzkaller #0
[ 1415.745709][T26084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1415.755816][T26084] Call Trace:
[ 1415.759133][T26084]  <TASK>
[ 1415.762106][T26084]  dump_stack_lvl+0x188/0x24e
[ 1415.766835][T26084]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1415.773030][T26084]  ? show_regs_print_info+0x12/0x12
[ 1415.778275][T26084]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1415.784476][T26084]  should_fail_ex+0x399/0x4d0
[ 1415.789217][T26084]  _copy_from_user+0x2c/0x170
[ 1415.793939][T26084]  __sys_bpf+0x2ea/0x780
[ 1415.798218][T26084]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1415.803646][T26084]  ? lock_chain_count+0x20/0x20
[ 1415.808539][T26084]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1415.814578][T26084]  __x64_sys_bpf+0x78/0x90
[ 1415.819034][T26084]  do_syscall_64+0x4c/0xa0
[ 1415.823486][T26084]  ? clear_bhb_loop+0x60/0xb0
[ 1415.828201][T26084]  ? clear_bhb_loop+0x60/0xb0
[ 1415.833000][T26084]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1415.838923][T26084] RIP: 0033:0x7fc3d1b9aeb9
[ 1415.843363][T26084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1415.863023][T26084] RSP: 002b:00007fc3cfdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1415.871515][T26084] RAX: ffffffffffffffda RBX: 00007fc3d1e15fa0 RCX: 00007fc3d1b9aeb9
[ 1415.879532][T26084] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[ 1415.887530][T26084] RBP: 00007fc3cfdf6090 R08: 0000000000000000 R09: 0000000000000000
[ 1415.895528][T26084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1415.903527][T26084] R13: 00007fc3d1e16038 R14: 00007fc3d1e15fa0 R15: 00007ffdfd304cd8
[ 1415.911536][T26084]  </TASK>
[ 1415.927284][T26093] netlink: 'syz.2.6306': attribute type 1 has an invalid length.
[ 1415.949840][T26093] netlink: 'syz.2.6306': attribute type 4 has an invalid length.
[ 1415.979554][T26093] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6306'.
[ 1416.462792][T26103] device wlan0 entered promiscuous mode
[ 1416.766279][T26108] netlink: 187664 bytes leftover after parsing attributes in process `syz.1.6311'.
[ 1416.801856][T26108] sysfs: cannot create duplicate filename '/class/ieee80211/.!
'
[ 1416.830757][T26108] CPU: 1 PID: 26108 Comm: syz.1.6311 Not tainted syzkaller #0
[ 1416.838342][T26108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1416.848469][T26108] Call Trace:
[ 1416.851802][T26108]  <TASK>
[ 1416.854796][T26108]  dump_stack_lvl+0x188/0x24e
[ 1416.859560][T26108]  ? show_regs_print_info+0x12/0x12
[ 1416.864885][T26108]  ? load_image+0x400/0x400
[ 1416.869469][T26108]  sysfs_warn_dup+0x8a/0xa0
[ 1416.874049][T26108]  sysfs_do_create_link_sd+0xc0/0x110
[ 1416.879516][T26108]  device_add+0x7ed/0xfb0
[ 1416.884035][T26108]  wiphy_register+0x1d9f/0x2ac0
[ 1416.889000][T26108]  ? cfg80211_event_work+0x40/0x40
[ 1416.894191][T26108]  ? minstrel_ht_alloc+0x894/0xa20
[ 1416.899405][T26108]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1416.905570][T26108]  ieee80211_register_hw+0x2d00/0x39f0
[ 1416.911140][T26108]  ? ieee80211_register_hw+0xea1/0x39f0
[ 1416.916772][T26108]  ? ieee80211_register_hw+0xea1/0x39f0
[ 1416.922422][T26108]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1416.928155][T26108]  ? memset+0x1e/0x40
[ 1416.932205][T26108]  ? __hrtimer_init+0x186/0x270
[ 1416.937140][T26108]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[ 1416.942976][T26108]  hwsim_new_radio_nl+0xafa/0xce0
[ 1416.948100][T26108]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1416.953737][T26108]  ? end_current_label_crit_section+0x170/0x170
[ 1416.960091][T26108]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1416.966146][T26108]  ? bpf_lsm_capable+0x5/0x10
[ 1416.970906][T26108]  ? security_capable+0x85/0xb0
[ 1416.975845][T26108]  genl_rcv_msg+0x604/0x790
[ 1416.980451][T26108]  ? genl_bind+0x360/0x360
[ 1416.984954][T26108]  ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0
[ 1416.991405][T26108]  netlink_rcv_skb+0x1fb/0x450
[ 1416.996256][T26108]  ? genl_bind+0x360/0x360
[ 1417.000761][T26108]  ? netlink_ack+0x1170/0x1170
[ 1417.005630][T26108]  ? down_read+0x1a8/0x2d0
[ 1417.010137][T26108]  genl_rcv+0x24/0x40
[ 1417.014203][T26108]  netlink_unicast+0x74d/0x8d0
[ 1417.019253][T26108]  netlink_sendmsg+0x8ad/0xbd0
[ 1417.024206][T26108]  ? netlink_getsockopt+0x550/0x550
[ 1417.029526][T26108]  ? aa_sock_msg_perm+0x94/0x150
[ 1417.034538][T26108]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1417.039898][T26108]  ? security_socket_sendmsg+0x7c/0xa0
[ 1417.045456][T26108]  ? netlink_getsockopt+0x550/0x550
[ 1417.050732][T26108]  ____sys_sendmsg+0x5be/0x970
[ 1417.055587][T26108]  ? __sys_sendmsg_sock+0x30/0x30
[ 1417.060690][T26108]  ? __import_iovec+0x315/0x500
[ 1417.065622][T26108]  ? import_iovec+0x6f/0xa0
[ 1417.070197][T26108]  ___sys_sendmsg+0x2a2/0x360
[ 1417.074966][T26108]  ? try_to_wake_up+0x6ae/0x1080
[ 1417.080009][T26108]  ? __sys_sendmsg+0x290/0x290
[ 1417.084934][T26108]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1417.089892][T26108]  ? __x64_sys_sendmsg+0x80/0x80
[ 1417.094914][T26108]  ? lockdep_hardirqs_on+0x94/0x140
[ 1417.100168][T26108]  do_syscall_64+0x4c/0xa0
[ 1417.104615][T26108]  ? clear_bhb_loop+0x60/0xb0
[ 1417.109319][T26108]  ? clear_bhb_loop+0x60/0xb0
[ 1417.114021][T26108]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1417.119983][T26108] RIP: 0033:0x7f18a6b9aeb9
[ 1417.124444][T26108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1417.144152][T26108] RSP: 002b:00007f18a79a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1417.152642][T26108] RAX: ffffffffffffffda RBX: 00007f18a6e15fa0 RCX: 00007f18a6b9aeb9
[ 1417.160659][T26108] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[ 1417.168669][T26108] RBP: 00007f18a6c08c1f R08: 0000000000000000 R09: 0000000000000000
[ 1417.176680][T26108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1417.184699][T26108] R13: 00007f18a6e16038 R14: 00007f18a6e15fa0 R15: 00007ffdfa927558
[ 1417.192724][T26108]  </TASK>
[ 1417.849329][T26125] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1417.912626][T26125] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1418.030257][T26135] netlink: 'syz.5.6319': attribute type 29 has an invalid length.
[ 1418.057712][T26135] netlink: 'syz.5.6319': attribute type 29 has an invalid length.
[ 1418.243012][T26137] netlink: 'syz.5.6320': attribute type 1 has an invalid length.
[ 1418.259598][T26137] netlink: 'syz.5.6320': attribute type 4 has an invalid length.
[ 1418.283724][T26137] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.6320'.
[ 1419.134203][T26170] netlink: 187664 bytes leftover after parsing attributes in process `syz.3.6334'.
[ 1419.161541][T26170] debugfs: Directory '.!
' with parent 'ieee80211' already present!
[ 1419.941155][T26178] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1420.035647][T26178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1421.077174][T26193] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.6340'.
[ 1422.421490][T26222] netlink: 'syz.1.6351': attribute type 16 has an invalid length.
[ 1422.461387][T26222] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6351'.
[ 1422.508759][T26222] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1422.635174][T26225] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1422.674877][T26225] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1424.918395][ T4274] ------------[ cut here ]------------
[ 1424.924457][ T4274] WARNING: CPU: 0 PID: 4274 at net/bluetooth/hci_conn.c:668 hci_conn_timeout+0x24f/0x450
[ 1424.934525][ T4274] Modules linked in:
[ 1424.938491][ T4274] CPU: 0 PID: 4274 Comm: kworker/u5:2 Not tainted syzkaller #0
[ 1424.946147][ T4274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1424.956326][ T4274] Workqueue: hci1 hci_conn_timeout
[ 1424.961531][ T4274] RIP: 0010:hci_conn_timeout+0x24f/0x450
[ 1424.967319][ T4274] Code: 1f 8e e8 04 96 9f f8 48 8b 35 f5 fb eb 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b6 85 20 f8 e8 f1 aa 4e f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd
[ 1424.987104][ T4274] RSP: 0018:ffffc90004347c08 EFLAGS: 00010293
[ 1424.993271][ T4274] RAX: ffffffff8933c77f RBX: ffff88807c8ec330 RCX: ffff88802f795940
[ 1425.001388][ T4274] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[ 1425.009484][ T4274] RBP: 00000000ffffffff R08: ffff88807c8ec013 R09: 1ffff1100f91d802
[ 1425.017613][ T4274] R10: dffffc0000000000 R11: ffffed100f91d803 R12: dffffc0000000000
[ 1425.025723][ T4274] R13: dffffc0000000000 R14: ffff88807c8ec000 R15: ffff88807c8ec010
[ 1425.033833][ T4274] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1425.042838][ T4274] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1425.049563][ T4274] CR2: 0000000000000000 CR3: 0000000061ad8000 CR4: 00000000003506f0
[ 1425.057664][ T4274] DR0: 0000200000000300 DR1: 8000000000000000 DR2: 0000000000000000
[ 1425.065784][ T4274] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600
[ 1425.073862][ T4274] Call Trace:
[ 1425.077212][ T4274]  <TASK>
[ 1425.080204][ T4274]  ? process_one_work+0x7b0/0x1160
[ 1425.085470][ T4274]  process_one_work+0x8a2/0x1160
[ 1425.090506][ T4274]  ? worker_detach_from_pool+0x240/0x240
[ 1425.096285][ T4274]  ? _raw_spin_lock_irq+0x86/0xf0
[ 1425.101426][ T4274]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1425.106694][ T4274]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1425.112339][ T4274]  ? kthread_data+0x4b/0xc0
[ 1425.116993][ T4274]  worker_thread+0xaa2/0x1270
[ 1425.121778][ T4274]  kthread+0x29d/0x330
[ 1425.126006][ T4274]  ? worker_clr_flags+0x1a0/0x1a0
[ 1425.131109][ T4274]  ? kthread_blkcg+0xd0/0xd0
[ 1425.135843][ T4274]  ret_from_fork+0x1f/0x30
[ 1425.140391][ T4274]  </TASK>
[ 1425.143526][ T4274] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1425.150851][ T4274] CPU: 0 PID: 4274 Comm: kworker/u5:2 Not tainted syzkaller #0
[ 1425.158451][ T4274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1425.168563][ T4274] Workqueue: hci1 hci_conn_timeout
[ 1425.173723][ T4274] Call Trace:
[ 1425.177032][ T4274]  <TASK>
[ 1425.180041][ T4274]  dump_stack_lvl+0x188/0x24e
[ 1425.184773][ T4274]  ? memcpy+0x3c/0x60
[ 1425.188786][ T4274]  ? show_regs_print_info+0x12/0x12
[ 1425.194025][ T4274]  ? load_image+0x400/0x400
[ 1425.198569][ T4274]  panic+0x2e5/0x730
[ 1425.202528][ T4274]  ? bpf_jit_dump+0xd0/0xd0
[ 1425.207097][ T4274]  ? ret_from_fork+0x1f/0x30
[ 1425.211734][ T4274]  __warn+0x2f8/0x4f0
[ 1425.215754][ T4274]  ? hci_conn_timeout+0x24f/0x450
[ 1425.220815][ T4274]  ? hci_conn_timeout+0x24f/0x450
[ 1425.225879][ T4274]  report_bug+0x2ba/0x4f0
[ 1425.230272][ T4274]  ? hci_conn_timeout+0x24f/0x450
[ 1425.235356][ T4274]  handle_bug+0x3a/0x70
[ 1425.239567][ T4274]  exc_invalid_op+0x16/0x40
[ 1425.244145][ T4274]  asm_exc_invalid_op+0x16/0x20
[ 1425.249039][ T4274] RIP: 0010:hci_conn_timeout+0x24f/0x450
[ 1425.254728][ T4274] Code: 1f 8e e8 04 96 9f f8 48 8b 35 f5 fb eb 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b6 85 20 f8 e8 f1 aa 4e f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd
[ 1425.274383][ T4274] RSP: 0018:ffffc90004347c08 EFLAGS: 00010293
[ 1425.280481][ T4274] RAX: ffffffff8933c77f RBX: ffff88807c8ec330 RCX: ffff88802f795940
[ 1425.288483][ T4274] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[ 1425.296482][ T4274] RBP: 00000000ffffffff R08: ffff88807c8ec013 R09: 1ffff1100f91d802
[ 1425.304482][ T4274] R10: dffffc0000000000 R11: ffffed100f91d803 R12: dffffc0000000000
[ 1425.312487][ T4274] R13: dffffc0000000000 R14: ffff88807c8ec000 R15: ffff88807c8ec010
[ 1425.320496][ T4274]  ? hci_conn_timeout+0x24f/0x450
[ 1425.325571][ T4274]  ? hci_conn_timeout+0x24f/0x450
[ 1425.330649][ T4274]  ? process_one_work+0x7b0/0x1160
[ 1425.335791][ T4274]  process_one_work+0x8a2/0x1160
[ 1425.340768][ T4274]  ? worker_detach_from_pool+0x240/0x240
[ 1425.346460][ T4274]  ? _raw_spin_lock_irq+0x86/0xf0
[ 1425.351545][ T4274]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1425.356597][ T4274]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1425.362176][ T4274]  ? kthread_data+0x4b/0xc0
[ 1425.366719][ T4274]  worker_thread+0xaa2/0x1270
[ 1425.371443][ T4274]  kthread+0x29d/0x330
[ 1425.375544][ T4274]  ? worker_clr_flags+0x1a0/0x1a0
[ 1425.380593][ T4274]  ? kthread_blkcg+0xd0/0xd0
[ 1425.385213][ T4274]  ret_from_fork+0x1f/0x30
[ 1425.389668][ T4274]  </TASK>
[ 1425.393535][ T4274] Kernel Offset: disabled
[ 1425.397959][ T4274] Rebooting in 86400 seconds..